[Identity] Disable prompts on AZD Credential token commands (#42535)

This can cause timeouts in the credential.

Signed-off-by: Paul Van Eck <[email protected]>

Author: pvaneck

sdk/identity/azure-identity/CHANGELOG.md

@@ -8,6 +8,8 @@
 
 ### Bugs Fixed
 
+- Fixed an issue where `AzureDeveloperCliCredential` would time out during token requests when `azd` prompts for user interaction. This issue commonly occurred in environments where the `AZD_DEBUG` environment variable was set, causing the Azure Developer CLI to display additional prompts that interfered with automated token acquisition. ([#42535](https://github.com/Azure/azure-sdk-for-python/pull/42535))
+
 ### Other Changes
 
 ## 1.24.0 (2025-08-07)

sdk/identity/azure-identity/azure/identity/_credentials/azd_cli.py

@@ -28,7 +28,7 @@
     "Please visit https://aka.ms/azure-dev for installation instructions and then,"
     "once installed, authenticate to your Azure account using 'azd auth login'."
 )
-COMMAND_LINE = ["auth", "token", "--output", "json"]
+COMMAND_LINE = ["auth", "token", "--output", "json", "--no-prompt"]
 EXECUTABLE_NAME = "azd"
 NOT_LOGGED_IN = "Please run 'azd auth login' from a command prompt to authenticate before using this credential."
 

sdk/identity/azure-identity/tests/test_azd_cli_credential.py

@@ -8,7 +8,7 @@
 
 from azure.identity import AzureDeveloperCliCredential, CredentialUnavailableError
 from azure.identity._constants import EnvironmentVariables
-from azure.identity._credentials.azd_cli import CLI_NOT_FOUND, NOT_LOGGED_IN
+from azure.identity._credentials.azd_cli import CLI_NOT_FOUND, NOT_LOGGED_IN, COMMAND_LINE
 from azure.core.exceptions import ClientAuthenticationError
 
 import subprocess
@@ -95,6 +95,33 @@ def test_get_token(get_token_method):
     assert token.expires_on == expected_expires_on
 
 
+@pytest.mark.parametrize("get_token_method", GET_TOKEN_METHODS)
+def test_command_list(get_token_method):
+    """The credential should formulate the command arg list correctly"""
+    access_token = "access token"
+    expected_expires_on = 1602015811
+    successful_output = json.dumps(
+        {
+            "expiresOn": datetime.fromtimestamp(expected_expires_on).strftime("%Y-%m-%dT%H:%M:%SZ"),
+            "token": access_token,
+            "subscription": "some-guid",
+            "tenant": "some-guid",
+            "tokenType": "Bearer",
+        }
+    )
+
+    def fake_check_output(command_line, **_):
+        assert command_line == ["azd"] + COMMAND_LINE + ["--scope", "scope"]
+        return successful_output
+
+    with mock.patch("shutil.which", return_value="azd"):
+        with mock.patch(CHECK_OUTPUT, fake_check_output):
+            token = getattr(AzureDeveloperCliCredential(), get_token_method)("scope")
+
+    assert token.token == access_token
+    assert token.expires_on == expected_expires_on
+
+
 @pytest.mark.parametrize("get_token_method", GET_TOKEN_METHODS)
 def test_cli_not_installed(get_token_method):
     """The credential should raise CredentialUnavailableError when the CLI isn't installed"""

sdk/identity/azure-identity/tests/test_azd_cli_credential_async.py

@@ -12,7 +12,7 @@
 from azure.identity import CredentialUnavailableError
 from azure.identity.aio import AzureDeveloperCliCredential
 from azure.identity._constants import EnvironmentVariables
-from azure.identity._credentials.azd_cli import CLI_NOT_FOUND, NOT_LOGGED_IN
+from azure.identity._credentials.azd_cli import CLI_NOT_FOUND, NOT_LOGGED_IN, COMMAND_LINE
 from azure.core.exceptions import ClientAuthenticationError
 import pytest
 
@@ -125,6 +125,36 @@ async def test_get_token(get_token_method):
     assert token.expires_on == expected_expires_on
 
 
+@pytest.mark.parametrize("get_token_method", GET_TOKEN_METHODS)
+async def test_command_list(get_token_method):
+    """The credential should formulate the command arg list correctly"""
+    access_token = "access token"
+    expected_expires_on = 1602015811
+    successful_output = json.dumps(
+        {
+            "expiresOn": datetime.fromtimestamp(expected_expires_on).strftime("%Y-%m-%dT%H:%M:%SZ"),
+            "token": access_token,
+            "subscription": "some-guid",
+            "tenant": "some-guid",
+            "tokenType": "Bearer",
+        }
+    )
+
+    def mock_exec_impl(*args, **_):
+        # args[0] is the executable, args[1:] are the command line arguments
+        command_line = list(args)
+        assert command_line == ["azd"] + COMMAND_LINE + ["--scope", "scope"]
+        return mock_exec(successful_output)()
+
+    with mock.patch("shutil.which", return_value="azd"):
+        with mock.patch(SUBPROCESS_EXEC, mock_exec_impl):
+            credential = AzureDeveloperCliCredential()
+            token = await getattr(credential, get_token_method)("scope")
+
+    assert token.token == access_token
+    assert token.expires_on == expected_expires_on
+
+
 @pytest.mark.parametrize("get_token_method", GET_TOKEN_METHODS)
 async def test_cli_not_installed(get_token_method):
     """The credential should raise CredentialUnavailableError when the CLI isn't installed"""