az command "--query flag" inconsistency in windows vs linux

[HarshaNalluru]

Describe the bug

There is a bug in the az cli command when running on Windows.

Accessing the indices in arrays is not allowed in windows..
I see the error message [0] was unexpected at this time.

Related command

az appconfig credential list -g <resource-group> -n <account-name> --query "([?name=='Primary'].connectionString)[0]"

Works in linux

"Endpoint=https://account-name.azconfig.io;Id=;Secret="

Fails in windows

[0] was unexpected at this time.
C:\path> "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\..\python.exe" -IBm azure.cli appconfig credential list -g -n --query ([?name=='Primary'].connectionString)[0]

Errors

[0] was unexpected at this time.
C:\path>  "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\\..\python.exe" -IBm azure.cli appconfig credential list -g <resource-group> -n <account-name> --query ([?name=='Primary'].connectionString)[0]

Issue script & Debug output

[0] was unexpected at this time.
C:\path>  "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\\..\python.exe" -IBm azure.cli appconfig credential list -g <resource-group> -n <account-name> --query ([?name=='Primary'].connectionString)[0]

Expected behavior

Expected the command to work the same way in both linux and windows.
Expected to not fail in windows.

Environment Summary

azure-cli 2.49.0

core 2.49.0
telemetry 1.0.8

Dependencies:
msal 1.20.0
azure-mgmt-resource 22.0.0

Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\sanallur.azure\cliextensions'

Python (Windows) 3.10.10 (tags/v3.10.10:aad5f6a, Feb 7 2023, 17:05:00) [MSC v.1929 32 bit (Intel)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

Originally found at Azure/azure-sdk-for-js#26034

[yonzhan]

Thank you for opening this issue, we will look into it.

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @albertofori, @avanigupta.

Issue Details

---

Describe the bug

There is a bug in the az cli command when running on Windows.

Accessing the indices in arrays is not allowed in windows..
I see the error message [0] was unexpected at this time.

Related command

az appconfig credential list -g <resource-group> -n <account-name> --query "([?name=='Primary'].connectionString)[0]"

Works in linux

"Endpoint=https://account-name.azconfig.io;Id=;Secret="

Fails in windows

[0] was unexpected at this time.
C:\path> "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\..\python.exe" -IBm azure.cli appconfig credential list -g -n --query ([?name=='Primary'].connectionString)[0]

Errors

[0] was unexpected at this time.
C:\path>  "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\\..\python.exe" -IBm azure.cli appconfig credential list -g <resource-group> -n <account-name> --query ([?name=='Primary'].connectionString)[0]

Issue script & Debug output

[0] was unexpected at this time.
C:\path>  "C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\wbin\\..\python.exe" -IBm azure.cli appconfig credential list -g <resource-group> -n <account-name> --query ([?name=='Primary'].connectionString)[0]

Expected behavior

Expected the command to work the same way in both linux and windows.
Expected to not fail in windows.

Environment Summary

azure-cli 2.49.0

core 2.49.0
telemetry 1.0.8

Dependencies:
msal 1.20.0
azure-mgmt-resource 22.0.0

Python location 'C:\Program Files (x86)\Microsoft SDKs\Azure\CLI2\python.exe'
Extensions directory 'C:\Users\sanallur.azure\cliextensions'

Python (Windows) 3.10.10 (tags/v3.10.10:aad5f6a, Feb 7 2023, 17:05:00) [MSC v.1929 32 bit (Intel)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

Originally found at Azure/azure-sdk-for-js#26034

Author:	HarshaNalluru
Assignees:	-
Labels:	bug, Service Attention, App Configuration, CXP Attention, Auto-Assign
Milestone:	-

[v-xuto]

@yonzhan, @albertofori What is the current progress on this issue?

[albertofori]

@yonzhan, the Azure App Configuration team does not control the behavior query parameter as this is a core functionality across all commands. Perhaps the team in charge of the azure.cli.core library could better help troubleshoot this

[jiasli]

This is caused by PowerShell quoting issue: #15529

PS D:\> az --debug --query "([?name=='Primary'].connectionString)[0]"
[0] was unexpected at this time.
D:\>  "C:\Program Files\Microsoft SDKs\Azure\CLI2\wbin\\..\python.exe" -IBm azure.cli --debug --query ([?name=='Primary'].connectionString)[0]

As the error indicates, PowerShell didn't quote ([?name=='Primary'].connectionString)[0] when calling az.cmd, causing [0] to be executed by CMD.

Even quoting the internal string for CMD doesn't work:

> az --debug --query """([?name=='Primary'].connectionString)[0]"""
cli.knack.cli: Command arguments: ['--debug', '--query', "([?name=='Primary'].connectionString)[0]"]

because this time PowerShell sees there are quotes (") in the string, so it escapes those quotes, causing it to be received by Azure CLI.

You may workaround it with

> az --debug --query --% "([?name=='Primary'].connectionString)[0]"
cli.knack.cli: Command arguments: ['--debug', '--query', "([?name=='Primary'].connectionString)[0]"]

or

> echo "([?name=='Primary'].connectionString)[0]" | az --debug --query "@-"
...
cli.azure.cli.core: No module found from index for '['--debug', '--query', "([?name=='Primary'].connectionString)[0]"]'