Added SSH auth scope to environment (#447)

Co-authored-by: Yeming Liu <[email protected]>

Author: isra-fel

src/Authentication.Abstractions/AzureEnvironment.BuiltIn.cs

@@ -165,6 +165,7 @@ private static void SetExtendedProperties(IDictionary<string, AzureEnvironment>
                 azureEnvironments[EnvironmentName.AzureCloud].SetProperty(ExtendedEndpoint.ContainerRegistryEndpointResourceId, AzureEnvironmentConstants.AzureContainerRegistryEndpointResourceId);
                 azureEnvironments[EnvironmentName.AzureCloud].SetProperty(ExtendedEndpoint.AzureCommunicationEmailEndpointSuffix, AzureEnvironmentConstants.AzureCommunicationEmailEndpointSuffix);
                 azureEnvironments[EnvironmentName.AzureCloud].SetProperty(ExtendedEndpoint.AzureCommunicationEmailEndpointResourceId, AzureEnvironmentConstants.AzureCommunicationEmailEndpointResourceId);
+                azureEnvironments[EnvironmentName.AzureCloud].SetProperty(ExtendedEndpoint.AzureSshAuthScope, AzureEnvironmentConstants.AzureSshAuthScope);
             }
 
             if (azureEnvironments.ContainsKey(EnvironmentName.AzureChinaCloud))
@@ -178,6 +179,7 @@ private static void SetExtendedProperties(IDictionary<string, AzureEnvironment>
                 azureEnvironments[EnvironmentName.AzureChinaCloud].SetProperty(ExtendedEndpoint.AzureAppConfigurationEndpointResourceId, AzureEnvironmentConstants.ChinaAppConfigurationEndpointResourceId);
                 azureEnvironments[EnvironmentName.AzureChinaCloud].SetProperty(ExtendedEndpoint.AzureAppConfigurationEndpointSuffix, AzureEnvironmentConstants.ChinaAppConfigurationEndpointSuffix);
                 azureEnvironments[EnvironmentName.AzureChinaCloud].SetProperty(ExtendedEndpoint.ContainerRegistryEndpointResourceId, AzureEnvironmentConstants.ChinaContainerRegistryEndpointResourceId);
+                azureEnvironments[EnvironmentName.AzureChinaCloud].SetProperty(ExtendedEndpoint.AzureSshAuthScope, AzureEnvironmentConstants.ChinaSshAuthScope);
             }
 
             if (azureEnvironments.ContainsKey(EnvironmentName.AzureUSGovernment))
@@ -191,6 +193,7 @@ private static void SetExtendedProperties(IDictionary<string, AzureEnvironment>
                 azureEnvironments[EnvironmentName.AzureUSGovernment].SetProperty(ExtendedEndpoint.AzureAppConfigurationEndpointResourceId, AzureEnvironmentConstants.USGovernmentAppConfigurationEndpointResourceId);
                 azureEnvironments[EnvironmentName.AzureUSGovernment].SetProperty(ExtendedEndpoint.AzureAppConfigurationEndpointSuffix, AzureEnvironmentConstants.USGovernmentAppConfigurationEndpointSuffix);
                 azureEnvironments[EnvironmentName.AzureUSGovernment].SetProperty(ExtendedEndpoint.ContainerRegistryEndpointResourceId, AzureEnvironmentConstants.USGovernmentContainerRegistryEndpointResourceId);
+                azureEnvironments[EnvironmentName.AzureUSGovernment].SetProperty(ExtendedEndpoint.AzureSshAuthScope, AzureEnvironmentConstants.USGovernmentSshAuthScope);
             }
         } 
     }

src/Authentication.Abstractions/AzureEnvironment.cs

@@ -571,7 +571,8 @@ public static class ExtendedEndpoint
                 AzureAppConfigurationEndpointResourceId = "AzureAppConfigurationEndpointResourceId",
                 ContainerRegistryEndpointResourceId = "ContainerRegistryEndpointResourceId",
                 AzureCommunicationEmailEndpointSuffix = "AzureCommunicationEmailEndpointSuffix",
-                AzureCommunicationEmailEndpointResourceId = "AzureCommunicationEmailEndpointResourceId";
+                AzureCommunicationEmailEndpointResourceId = "AzureCommunicationEmailEndpointResourceId",
+                AzureSshAuthScope = "AzureSshAuthScope";
         }
     }
 }

src/Authentication.Abstractions/AzureEnvironmentConstants.cs

@@ -294,5 +294,12 @@ public static class AzureEnvironmentConstants
         /// </summary>
         public const string AzureCommunicationEmailEndpointSuffix = "communication.azure.com";
         public const string AzureCommunicationEmailEndpointResourceId = "https://communication.azure.com";
+
+        /// <summary>
+        /// The scope for SSH authentication. See <see cref="SshCredentialFactory"/>
+        /// </summary>
+        public const string AzureSshAuthScope = "https://pas.windows.net/CheckMyAccess/Linux/.default";
+        public const string ChinaSshAuthScope = "https://pas.chinacloudapi.cn/CheckMyAccess/Linux/.default";
+        public const string USGovernmentSshAuthScope = "https://pasff.usgovcloudapi.net/CheckMyAccess/Linux/.default";
     }
 }

src/Authentication.Abstractions/Extensions/AzureEnvironmentExtensions.cs

@@ -328,6 +328,9 @@ public static void SetEndpoint(this IAzureEnvironment environment, string endpoi
                     case AzureEnvironment.ExtendedEndpoint.AzureCommunicationEmailEndpointResourceId:
                         environment.SetProperty(AzureEnvironment.ExtendedEndpoint.AzureCommunicationEmailEndpointResourceId, propertyValue);
                         break;
+                    case AzureEnvironment.ExtendedEndpoint.AzureSshAuthScope:
+                        environment.SetProperty(AzureEnvironment.ExtendedEndpoint.AzureSshAuthScope, propertyValue);
+                        break;
                 }
             }
         }