See "Token credentials not supported by the File Share service" when using DefaultAzureCredential with ShareServiceClient about azure-sdk-for-python

[github-actions]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @jalauzon-msft @vincenttran-msft.

[LiliDeng]

@vibhansa-msft , I used the sample here, it didn't work. https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/storage/azure-storage-file-share/samples/file_samples_authentication.py#L85, any idea?

[jalauzon-msft]

Hi @LiliDeng, what version of azure-storage-file-share are you using? OAuth support was only added to file-share somewhat recently in version 12.12.0, see CHANGELOG. You will need to be using at least this version to use a TokenCredential with the Files service. Also please be sure you are passing token_intent as the sample code does as this is required for Files OAuth. Also note that file-share has its own set of RBAC roles.

Additionally, there are some restrictions with Files OAuth in that it will only work on File/Directory level operations and will not currently work with Share level operations like Create Share, Delete Share, etc. Support for Share level operations is currently being worked on by the service team and should be coming to the SDK later this year.

[github-actions]

Hi @LiliDeng. Thank you for opening this issue and giving us the opportunity to assist. To help our team better understand your issue and the details of your scenario please provide a response to the question asked above or the information requested above. This will help us more accurately address your issue.

[LiliDeng]

Hi @LiliDeng, what version of azure-storage-file-share are you using? OAuth support was only added to file-share somewhat recently in version 12.12.0, see CHANGELOG. You will need to be using at least this version to use a TokenCredential with the Files service. Also please be sure you are passing token_intent as the sample code does as this is required for Files OAuth. Also note that file-share has its own set of RBAC roles.

Additionally, there are some restrictions with Files OAuth in that it will only work on File/Directory level operations and will not currently work with Share level operations like Create Share, Delete Share, etc. Support for Share level operations is currently being worked on by the service team and should be coming to the SDK later this year.

Thank you, I will upgrade the package and have a try.