com.databricks.sdk.core.oauth

Class AzureDevOpsIDTokenSource

java.lang.Object

com.databricks.sdk.core.oauth.AzureDevOpsIDTokenSource

All Implemented Interfaces:

IDTokenSource

@InternalApi
public class AzureDevOpsIDTokenSource
extends Object
implements IDTokenSource

AzureDevOpsIDTokenSource retrieves JWT Tokens from Azure DevOps Pipelines. This class implements the IDTokenSource interface and provides a method for obtaining ID tokens specifically from Azure DevOps Pipeline environment.

This implementation relies on the Azure DevOps OIDC token API.

Constructor Summary

Constructors

Modifier	Constructor and Description
	AzureDevOpsIDTokenSource(HttpClient httpClient) Constructs a new AzureDevOpsIDTokenSource by reading environment variables.
protected	AzureDevOpsIDTokenSource(HttpClient httpClient, Environment environment) Constructs a new AzureDevOpsIDTokenSource with a custom environment.

Method Summary

Modifier and Type	Method and Description
IDToken	getIDToken(String audience) Retrieves an ID token from Azure DevOps Pipelines.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AzureDevOpsIDTokenSource

public AzureDevOpsIDTokenSource(HttpClient httpClient)

Constructs a new AzureDevOpsIDTokenSource by reading environment variables. This constructor implements fail-early validation - if any required environment variables are missing, it will throw a DatabricksException immediately.

Parameters:

httpClient - The HTTP client to use for making requests

Throws:

DatabricksException - if any required environment variables are missing

AzureDevOpsIDTokenSource

protected AzureDevOpsIDTokenSource(HttpClient httpClient,
                                   Environment environment)

Constructs a new AzureDevOpsIDTokenSource with a custom environment. This constructor is primarily used for testing to inject mock environment variables.

Parameters:

httpClient - The HTTP client to use for making requests

environment - The environment to read configuration from

Throws:

DatabricksException - if httpClient is null or any required environment variables are missing

Method Detail

getIDToken

public IDToken getIDToken(String audience)

Retrieves an ID token from Azure DevOps Pipelines. This method makes an authenticated request to Azure DevOps to obtain a JWT token that can later be exchanged for a Databricks access token.

Note: The audience parameter is ignored for Azure DevOps OIDC tokens as they have a hardcoded audience for Azure AD integration.

Specified by:

getIDToken in interface IDTokenSource

Parameters:

audience - Ignored for Azure DevOps OIDC tokens

Returns:

An IDToken object containing the JWT token value

Throws:

DatabricksException - if the token request fails