microsoft / vscode-azureresourcegroups

VS Code extension for managing Azure resources.
https://marketplace.visualstudio.com/items?itemName=ms-azuretools.vscode-azureresourcegroups
MIT License
52 stars 28 forks source link

Unable to log out of Azure account #800

Closed weddige closed 7 months ago

weddige commented 9 months ago

Does this issue occur when all extensions are disabled?: N/A

Steps to Reproduce:

  1. F1 > Azure: Sign In
  2. Open Azure Extension and check Subscription

image

I have two Azure subscriptions. One is linked to my work account (...@lutrasecurity; see screenshot) and is called "Lutra Security" and one is linked to my private account and is called "Azure-Abonnement 1".

It doesn't matter with which account I am logged in or if I am logged in at all: I always get my private subscription. I captured the traffic between VSCode and azure.com and it sends a few requests (pink in the screenshot) with the JWT associated with the logged in user and then continues with the JWT for my private account (green in the screenshot).

image

I have been not been able to log out of my private account. Where are the credentials stored? And what could be the cause for the behaviour? If VSCode/the Azure plugins store the credentials in multiple locations, this could become a security issue.

alexweininger commented 8 months ago

Hi @weddige, as of v0.8.0, the Azure Resources extension no longer depends on the Azure Account extension for authentication. Learn more about this move in the Azure Resources v0.8.0 release notes.

Make sure you are using the new commands from Azure Resources and methods and not the Azure Account commands to manage your account.

From now on, you can sign out like so: image

This status bar item is part of Azure Account is separate from the Azure Resources extension.

283535172-7512e376-686d-423d-94c3-557d889d4507

We know this is confusing and we are working on deprecating the Azure Account extension soon to make this less confusing.

nturinski commented 7 months ago

Closing due to inactivity. If you were able to log out, hooray! 🎉 If not, please reopen and we'll help you with that.