Allows users to select browser for authentication#2910
Conversation
3e1ede7 to
ea9149d
Compare
|
@gingi Is there anything any of us outside of this team could do to help get this over the finish line? |
We are almost done, mostly focusing on some end-to-end testing. In the meantime, you can check out the branch and test it locally. We are trying to cover all scenarios. |
b2115ae to
d45e4f5
Compare
|
@gingi, this is a great update! Are you also planning to take a look at the Windows build? I'm looking forward to having the CA issues fixed on Windows too, but the app is unfortunately not starting |
|
@gingi I briefly tested this branch and I can actually log in now again. It works when I change my default browser to Edge. I would never do that voluntarily though, is there some way to make this work with other browsers? Great work though, waiting for this to get released hopefully soon...? |
d176ba5 to
4a3b987
Compare
f2ec811 to
09a744f
Compare
|
I downloaded the pipeline artifacts for windows (https://azurebatch.visualstudio.com/BatchExplorer/_build/results?buildId=8480&view=artifacts&pathAsName=false&type=publishedArtifacts) and if the "Use system browser for authentication" is unchecked, I get an empty popup when pressing Sign in to Azure. |
09a744f to
42c74a1
Compare
Hi @eusebiu. That has just been addressed. Authentication should now be supported both through the built-in window and the system browser (currently Edge). |
The PR is pretty much ready and should be merged soon to appear in an upcoming insider build. The issue with Chrome will unfortunately need to be addressed later on, as it requires a service change with Entra, which will allow us to use a custom protocol for the auth redirect URI. Presently we're using |
Needed for slide toggles.
* Main app window now opens without prior authentication * New welcome screen prompts user to sign in, while hiding side menu items and allowing the user to access settings * An overlay prompts the user to authenticate against each tenant that requires interactive authentication, and includes a toggle for using the external (system) browser * App settings now have ability to toggle external browser for auth
Moved out of the constructor in the case when the windows are reloaded. Fixes an issue where a system error causes IPC messages to be ignored because they are not recreated.
42c74a1 to
13cddff
Compare
|
I just tested this, and I'm able to authenticate again It's wonderful, but I cannot use it as-is. My one big remaining problem? I need to be able to select the account I authenticate with: It's NOT the account I'm signed into Windows with, it's a separate account used to isolate access to production systems from people who might steal my credentials without my participation. When using this, I just get a "... you can close this window" without any opportunity to select which account to use. |
I understand. Are you able to visit the Authentication Settings view to select which Entra tenants (or "directories") you want to retrieve Batch accounts from? |
|
@MichaCo Here's some documentation on how to make Entra authentication work with non-Edge browsers. Hopefully it's a good stop-gap until our back-end configuration is sorted out. |
Wow, what timing when I experience an issue after downloading batch explorer for the first time and see it was fixed a mere 45 mins ago. Thanks @gingi ! Downloading from https://azurebatch.visualstudio.com/3426cbfe-4c9a-4da4-88df-70f025a77017/_apis/build/builds/8495/artifacts?artifactName=windows&api-version=7.1&%24format=zip got it working for me. |
Thanks for into and the docs link @gingi ! I must have set some hsts policy for localhost, probably by one of our services because I was able to fix it by removing the hsts policy for localhost. To do so: Now I can login with Chrome, too 🎉 |
Following up here @gingi - this worked for me on initial download and startup but then when I was timed out / tried to reauthenticate I ran into the same error. |





Fixes #2446