Freddydk/renewauth (#3767)

Renew federated token when access token needs renewal (works only on
GitHub)

---------

Co-authored-by: freddydk <[email protected]>

Author: freddydk

Auth/Renew-BcAuthContext.ps1

@@ -32,6 +32,11 @@ try {
         $bcAuthContext
     }
     else {
+        if ($bcAuthContext.ContainsKey('clientAssertion') -and "$ENV:ACTIONS_ID_TOKEN_REQUEST_TOKEN" -ne "" -and "$ENV:ACTIONS_ID_TOKEN_REQUEST_URL" -ne "") {
+            Write-Host "Renew federated token"
+            $result = Invoke-RestMethod -Method GET -UseBasicParsing -Headers @{ "Authorization" = "bearer $ENV:ACTIONS_ID_TOKEN_REQUEST_TOKEN"; "Accept" = "application/vnd.github+json" } -Uri "$ENV:ACTIONS_ID_TOKEN_REQUEST_URL&audience=api://AzureADTokenExchange"
+            $bcauthContext.clientAssertion = $result.value
+        }
         New-BcAuthContext `
             -clientID $bcAuthContext.clientID `
             -tenantID $bcAuthContext.tenantID `

ReleaseNotes.txt

@@ -1,6 +1,7 @@
 6.0.30
 Issue 3762 Give Option to Choose SQL PowerShell Module When Restoring From BacPac
 There are instances where sqlps does not work as expected when it is installed. This change adds a switch parameter, useSqlServerModule, to Restore-BcDatabaseFromArtifacts, New-NavContainer, and the BcContainerHelper config file.
+Issue 1303 from AL-Go repository - renew federated token when access token needs renewal (works only for GitHub at this time)
 
 6.0.29
 Issue 3591 When using Publish-NAVApp to publish an app, which fails compilation in the service, the command might hang forever - the fix for this is a temporary hack put in place for the versions which doesn't work.