d33800ec10
Bump form-data from 3.0.4 to 3.0.5 in /extensions/microsoft-authentication ( #321533 )
...
Bump form-data in /extensions/microsoft-authentication
Bumps [form-data](https://github.com/form-data/form-data ) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/form-data/form-data/releases )
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md )
- [Commits](https://github.com/form-data/form-data/compare/v3.0.4...v3.0.5 )
---
updated-dependencies:
- dependency-name: form-data
dependency-version: 3.0.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 20:21:37 +00:00
ca425775e4
Revert "Optimize shared built-in extension dependencies ( #318045 )" ( #319774 )
...
This reverts commit 26e580781a
2026-06-03 17:21:27 +00:00
26e580781a
Optimize shared built-in extension dependencies ( #318045 )
2026-06-03 08:49:40 +00:00
49d14f8afc
chore: npm audit fix ( #318614 )
...
* chore: npm audit fix
* Remove merge conflict
* chore: bump build
2026-05-28 21:53:33 +00:00
8748be1f1a
feat: update to Electron v42 ( #316661 )
...
* feat: update to Electron v42
* chore: drop support for arm 32-bit server
* chore: update types/node to v24.x
* chore: temporarily lock the target version for build/
* chore: update v8-source-location.patch
* chore: fix clippy
* chore: cleanup armhf server ci config
* fix: broken lock file
* fix: c++ version requirement for sysroot builds
* fix: msvc compilation of native modules
* fix: handle rejections for fire-and-forget loadurl
* fix: windows build
* ci: fix teardown of daemon process on windows
```
2026-05-15T20:55:09.7717127Z Assertion failed: !(handle->flags & UV_HANDLE_CLOSING), file src\win\async.c, line 76
```
* chore: update deb and rpm dependencies
* chore: update version info
* spec: improve reliablity of offscreencanvas tests
* spec: retry EPERM failures on teardown
* chore: update x86_64 rpm deps
* ci: exclude server binskim for armhf
* temp: bump distro
* test: ignore deprecation warnings treated as errors
* chore: update lockfile
* fix: externalize electron from auth extension bundles
Error: Cannot find module 'c:\Users\cloudtest\AppData\Local\Temp\vscode-sanityQvCaze\vscode-server-win32-x64-web\extensions\github-authentication\dist\install.js'
at Module._resolveFilename (node:internal/modules/cjs/loader:1476:15)
at wrapResolveFilename (node:internal/modules/cjs/loader:1049:27)
at defaultResolveImplForCJSLoading (node:internal/modules/cjs/loader:1073:10)
at resolveForCJSWithHooks (node:internal/modules/cjs/loader:1094:12)
at Module._load (node:internal/modules/cjs/loader:1262:25)
at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5)
at node:internal/main/run_main_module:33:47 {
code: 'MODULE_NOT_FOUND',
requireStack: []
}
Node.js v24.15.0
* test: make wsl sanity tests reliable
* chore: bump electron@42.1.0
* temp: bump distro
* chore: bump electron@42.2.0
* chore: bump distro
* chore: update debian dependencies
* Revert "test: make wsl sanity tests reliable"
This reverts commit b3f2b63e83
2026-05-27 14:57:41 +02:00
d8dd0206e5
Forward RFC 8707 resource indicator through auth provider ( #314784 )
...
Plumbs an optional 'resource' field through IAuthenticationService get/createSession options and the authIssuers proposal so MCP authentication can request audience-restricted tokens. mainThreadMcp now forwards authDetails.resourceMetadata.resource into both calls.
In the microsoft-authentication extension, the resource is threaded into MSAL's acquireTokenInteractive, acquireTokenByDeviceCode, and acquireTokenSilent. Bumps @azure/msal-node and @azure/msal-node-extensions to ^5.1.5; adapts to ServerAuthorizationCodeResponse -> AuthorizeResponse and fromNativeBroker -> fromPlatformBroker renames.
Adds tests verifying that getSessions/createSession forward 'resource' to the provider, and that each MSAL flow (default, protocol handler, device code) forwards 'resource' to the underlying MSAL call.
2026-05-11 22:40:00 +00:00
de7206fad5
Merge branch 'main' into dev/mjbvz/wonderful-piranha
2026-04-19 20:14:50 -04:00
5e957b6922
Update build ts version
2026-04-08 20:49:29 -07:00
d632fa37d2
Add oauth section to mcp.json to allow overriding of client id ( #308648 )
...
* Add `oauth` section to mcp.json to allow overriding of client id
More properties (like client secret) can come later... but this is the foundation, which is a lot of plumbing...
ref https://github.com/microsoft/vscode/issues/257415
* feedback
2026-04-08 19:40:23 -07:00
a230337699
sessions - more renames ( #307343 )
2026-04-02 07:57:47 +00:00
e9b82791e6
Commit other npmrc files
2026-03-10 20:56:09 -07:00
7027856936
sessions - allow callback scheme in auth ( #298270 )
2026-02-27 15:27:08 +00:00
e395fe2993
Finalize env.isAppPortalable API proposal ( #297177 )
2026-02-24 11:43:00 -08:00
cc10bc708e
Enable incremental builds to speed up updates after first build
2026-02-19 14:14:37 -08:00
2402f6cb41
Update extensions/microsoft-authentication/esbuild.mts
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-02-19 12:00:44 -08:00
2d9e484c8e
Switch most remaining extensions to use esbuild
...
Just 3 left:
- git and github. These are doing weird stuff with d.ts imports and const enums
- github-authentication which has some tricky path mapping stuff
2026-02-19 11:12:46 -08:00
2fedd2e043
Adopt esbuild for a few more extensions
...
- extension-editing
- terminal-suggest
- tunnel-forwarding
- php language features
2026-02-18 15:20:02 -08:00
80ee2d8f15
Remove unused LoopbackAuthServer from microsoft-authentication ( #295254 )
...
The LoopbackAuthServer class in extensions/microsoft-authentication
is dead code with no references. The active loopback servers live in
extensions/github-authentication and src/vs/workbench/api/node.
2026-02-13 15:48:39 -06:00
ee01088b74
Update roots
2026-01-30 13:12:58 -08:00
0d9a2ef2b0
Add explicit rootDirs
2026-01-30 11:07:53 -08:00
aa19df565f
Portable mode improvements and bug fixes ( #287063 )
...
Disabled protocol handlers and registry updates on Windows in portable mode.
Added API proposal to detect if VS Code is running in portable mode from extensions.
Skipped protocol redirect in GitHub authentication in portable mode.
2026-01-24 13:22:53 +01:00
8244c9f6b9
Add log statement to see environment ( #285220 )
2025-12-28 07:28:57 +01:00
e3bbd5bb1d
Fix MSAL Runtime telemetry not firing ( #282595 )
...
We were too strict. This should actually yield telemtry.
Fixes https://github.com/microsoft/vscode/issues/282593
2025-12-10 23:48:55 +00:00
815f99e9a0
Bump jws from 3.2.2 to 3.2.3 in /extensions/microsoft-authentication ( #282028 )
2025-12-08 12:04:37 -08:00
80f75cffa0
Don't unregister built-in providers on 403 ( #278890 )
...
related to https://github.com/microsoft/vscode/issues/278875
2025-11-21 17:11:03 -08:00
4c96903608
Support brokering from Linux x64 and Intel Macs ( #278689 )
...
* Support Linux & Intel Macs
This grabs the native files directly since the ones at the root are not expected to work in our cases, namely Intel Mac where we use arm machines to build the x64 build.
* actually include macOS intel bits
2025-11-21 01:42:11 +00:00
134826b979
Start sending ClientAuthError telemetry for microsoft auth ( #278643 )
...
To better bucketize MSAL broker errors.
2025-11-20 12:27:10 -08:00
c6464f84b9
Remove classic Microsoft authentication implementation ( #276787 )
...
* Initial plan
* Remove classic Microsoft authentication implementation
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
* Remove classic implementation
* extra space
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
Co-authored-by: Tyler Leonhardt <tyleonha@microsoft.com >
2025-11-11 23:18:53 +00:00
a3fcd46091
Remove web worker support from microsoft-authentication extension ( #276762 )
...
* Initial plan
* Remove web worker support from microsoft-authentication extension
- Remove browser entry point from package.json
- Remove browser webpack configuration
- Remove browser-specific scripts (compile-web, watch-web)
- Remove src/browser/ directory with browser-specific implementations
- Remove ExtensionHost.WebWorker enum value
- Remove supportsWebWorkerExtensionHost flags from all flows
- Simplify authProvider.ts by removing web worker detection logic
- Remove web worker test case from flows.test.ts
- Successfully compiled with 0 errors
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
* couple references
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
2025-11-11 11:09:39 -08:00
bf0fa4c73f
Finalize idToken API ( #274464 )
...
Fixes https://github.com/microsoft/vscode/issues/140929
2025-11-03 10:25:57 +01:00
f197aadde1
Fix output for microsoft-authentication
...
For #271167
All out of extensions normally target `out`. `dist` is for webpack
2025-10-13 16:52:33 -07:00
bcbd0b4a98
Remove quick pick flow for protocol handler ( #270455 )
...
Remove quick pick flow
Since we have device code flow, that's better.
ref https://github.com/microsoft/vscode/issues/270452
2025-10-08 18:20:16 -07:00
d751a3d55f
Add device code flow when not brokered ( #270453 )
...
fixes https://github.com/microsoft/vscode/issues/270452
2025-10-08 16:49:23 -07:00
8845fc4b5c
Remove any casts in auth extensions ( #270089 )
2025-10-06 12:28:27 -07:00
360c9fd134
Add lint rule for as any and bulk ignore all existing breaks
...
For #269213
This adds a new eslint rule for `as any` and `<any>({... })`. We'd like to remove almost all of these, however right now the first goal is to prevent them in new code. That's why with this first PR I simply add `eslint-disable` comments for all breaks
Trying to get this change in soon after branching off for release to hopefully minimize disruption during debt week work
2025-10-02 23:38:33 -07:00
d8c3a3263d
Add redirect URI and update MSAL packages ( #268939 )
...
* Bump MSAL packages further
To hopefully fix bugs
* add redirect uri
2025-09-29 19:57:44 +00:00
383f4b59ce
Bump MSAL node to assist non-broker flows ( #268242 )
...
This includes a bug fix on the MSAL side for non-broker flows.
2025-09-24 16:26:17 -07:00
bf0108fb1e
Re-enable MSAL broker on macOS ( #267833 )
...
Fixes https://github.com/microsoft/vscode/issues/260158
2025-09-22 13:36:31 -07:00
3e2f34ebe8
Address API sync feedback for challenges API ( #265921 )
...
* Address API sync feedback for challenges API
* use `fallbackScopes` instead of `scopes`
* `WWW`-> `Www`
ref https://github.com/microsoft/vscode/issues/260156
* adopt the change
2025-09-09 17:05:43 -04:00
97b2c007cd
Migrate fully of moduleResolution node10
...
Fixes #265420
2025-09-09 11:08:41 -07:00
46433f1a75
Fix ms auth compile error
2025-09-05 14:52:25 -07:00
c67f8834a7
Adding a few more ignoreDeprecations
2025-09-05 14:48:25 -07:00
7a4d034fc5
Disable macOS broker support due to blocking MSAL bug ( #264954 )
...
Sigh... Unfortunately, MSAL seems to fail for clients that don't have managed machines that have opted in to the broker... I have opened a blocking issue on them internally.
At least, when they fix it, it would just be a matter of updating the package version and the conditional here.
2025-09-03 17:30:49 +00:00
151a19f321
Only add the broker if it's available ( #264785 )
...
We shouldn't have to do this, but let's see if this resolves issues with users who don't have the broker installed.
2025-09-02 22:28:03 +00:00
70e7eae770
MSAL Redirect Funkiness ( #264057 )
...
Why do they do this to me...
2025-08-29 08:47:16 -10:00
54b39dc336
Typo in telemetry ( #264041 )
2025-08-29 16:50:45 +00:00
f14ccecb1e
Add support for Entra ID v1.0 authorization servers in VSCode MCP Client ( #262603 )
...
* Initial plan
* Add v1.0 Entra ID support and optimize MCP discovery for Microsoft endpoints
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
* Add tests for v1.0 authorization server support
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
* Address code review feedback: remove redundant tests and Microsoft-specific logic
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: TylerLeonhardt <2644648+TylerLeonhardt@users.noreply.github.com >
2025-08-29 12:21:53 +02:00
7e8f8e9230
Add new msal-no-broker implementation option to allow for getting rid of classic soon ( #263966 )
...
Also, removes the redirectUri from acquireTokenSilent because MSAL was throwing because of it.
2025-08-29 09:01:02 +02:00
2e43a0c0d6
Handle authority & redirectUri in acquireTokenByRefreshToken ( #263958 )
...
Handle authority in acquireTokenByRefreshToken
This fixes the migration logic for clients that that moving from MSAL to MSAL+Broker
2025-08-29 04:27:54 +00:00
5b25d491ca
Add a log statement for acquireTokenSilent ( #263951 )
...
* Add a log statement for acquireTokenSilent
* stringify
2025-08-29 06:09:28 +02:00
dependabot[bot]
dileepyavan
Dmitriy Vasyura
Raymond Zhao
Robo
Tyler James Leonhardt
Matt Bierner
Benjamin Pasero
Copilot
Matt Bierner