Skip to content

Fix custom IMDS endpoint path construction #1060

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Copilot wants to merge 2 commits into
base: dev
Choose a base branch
from
+22 −1
Open

Fix custom IMDS endpoint path construction #1060

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
225e542
Initial plan
Copilot Aug 16, 2026
02c1269
Fix Azure pod identity IMDS endpoint path
Copilot Aug 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion msal4j-sdk/src/main/java/com/microsoft/aad/msal4j/IMDSManagedIdentitySource.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ public IMDSManagedIdentitySource(MsalRequest msalRequest,
}

StringBuilder builder = new StringBuilder(environmentVariables.getEnvironmentVariable(Constants.AZURE_POD_IDENTITY_AUTHORITY_HOST));
builder.append("/" + IMDS_TOKEN_PATH);
builder.append(IMDS_TOKEN_PATH);
try {
imdsEndpoint = new URI(builder.toString());
} catch (URISyntaxException e) {
Expand Down
21 changes: 21 additions & 0 deletions msal4j-sdk/src/test/java/com/microsoft/aad/msal4j/ManagedIdentityTests.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -366,6 +366,27 @@ void managedIdentityTest_DifferentScopes_RequestsNewToken(ManagedIdentitySourceT
class ManagedIdentityBehaviorTests extends BaseManagedIdentityTest {
//Tests covering specific behavior/scenarios/use cases/etc. for Managed Identity flows

@Test
void managedIdentityTest_AzurePodIdentityAuthorityHostBuildsImdsEndpointWithoutDoubleSlash() throws Exception {
String authorityHost = "http://127.0.0.1:80";
EnvironmentVariablesHelper environmentVariables = new EnvironmentVariablesHelper(IMDS, null);
environmentVariables.mockedEnvironmentVariables.put(
Constants.AZURE_POD_IDENTITY_AUTHORITY_HOST, authorityHost);
ManagedIdentityApplication.setEnvironmentVariables(environmentVariables);
initHttpClientMock(IMDS);
initManagedIdentityApplication(ManagedIdentityId.systemAssigned());

when(httpClientMock.send(any()))
.thenReturn(expectedResponse(HttpStatus.HTTP_OK,
getSuccessfulResponse(ManagedIdentityTestConstants.RESOURCE)));

acquireTokenCommon(ManagedIdentityTestConstants.RESOURCE).get();

ArgumentCaptor<HttpRequest> captor = ArgumentCaptor.forClass(HttpRequest.class);
verify(httpClientMock).send(captor.capture());
assertEquals("/metadata/identity/oauth2/token", captor.getValue().url().getPath());
}

@ParameterizedTest
@MethodSource("com.microsoft.aad.msal4j.ManagedIdentityTestDataProvider#createDataError")
void managedIdentityTest_WithClaims(ManagedIdentitySourceType source, String endpoint) throws Exception {
Expand Down
Loading