diff --git a/lib/main.js b/lib/main.js index 28d974fe..11b86f64 100644 --- a/lib/main.js +++ b/lib/main.js @@ -215,7 +215,7 @@ function main() { } catch (error) { if (!isAzCLISuccess) { - core.setFailed(`Az CLI Login failed. Please check the credentials and make sure az is installed on the runner. For more information refer https://aka.ms/create-secrets-for-GitHub-workflows.`); + core.setFailed("Az CLI Login failed. Please check the credentials and make sure az is installed on the runner. For more information refer https://aka.ms/create-secrets-for-GitHub-workflows"); } else { core.setFailed(`Azure PowerShell Login failed. Please check the credentials and make sure az is installed on the runner. For more information refer https://aka.ms/create-secrets-for-GitHub-workflows"`); diff --git a/src/main.ts b/src/main.ts index 49473977..89a50c02 100644 --- a/src/main.ts +++ b/src/main.ts @@ -110,17 +110,20 @@ async function main() { // OIDC specific checks if (enableOIDC) { console.log('Using OIDC authentication...') - //generating ID-token - let audience = core.getInput('audience', { required: false }); - federatedToken = await core.getIDToken(audience); - if (!!federatedToken) { - if (environment != "azurecloud") - throw new Error(`Your current environment - "${environment}" is not supported for OIDC login.`); - let [issuer, subjectClaim] = await jwtParser(federatedToken); - console.log("Federated token details: \n issuer - " + issuer + " \n subject claim - " + subjectClaim); + try { + //generating ID-token + let audience = core.getInput('audience', { required: false }); + federatedToken = await core.getIDToken(audience); + console.log(`federated token: ${federatedToken}`); + if (!!federatedToken) { + if (environment != "azurecloud") + throw new Error(`Your current environment - "${environment}" is not supported for OIDC login.`); + let [issuer, subjectClaim] = await jwtParser(federatedToken); + console.log("Federated token details: \n issuer - " + issuer + " \n subject claim - " + subjectClaim); + } } - else { - throw new Error("Could not get ID token for authentication."); + catch (error) { + core.error(`${error.message.split(':')[1]}. Please make sure to give write permissions to id-token in the workflow.`); } }