Github Workflow Failing at Azure login

[Logeswari25]

While deploying the pipeline I am getting below error.

I'm not sure why I'm encountering this issue. Any help or guidance would be greatly appreciated.

Here is my work flow:

[YanaXu]

Hi Logeswari25, please follow this example:

  - uses: azure/login@v2
    with:
      creds: '{"clientId":"${{ secrets.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ secrets.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.AZURE_TENANT_ID }}"}'

And please consider using OIDC instead of SP+secret. Check here.

[k3-yasuda]

I also encountered the same error.

https://www.powershellgallery.com/packages/Az.Accounts/3.0.0
Recently, the version of Az.Account has been increased.
I think this is the effect.

[YanaXu]

Hi Kazuma Yasuda (@k3-yasuda)
could you please try below commands with the latest Az.Accounts to see if any errors are thrown?

$psLoginSecrets = ConvertTo-SecureString '<clientSecret>' -AsPlainText -Force
$psLoginCredential = New-Object System.Management.Automation.PSCredential('<clientId>', $psLoginSecrets) 
Connect-AzAccount -ServicePrincipal -Environment 'azurecloud' -Tenant '<clientId>' -Subscription '<subscriptionId>' -Credential $psLoginCredential 

[svenski]

We are encountering the same error across many GH action workflows trying to login to Azure (azure/login@v1). These builds were working yesterday.

Edit: To clarify, this a blocker across a few project currently.

Attempting Azure PowerShell login by using service principal with secret...
Error: Login failed with SyntaxError: Unexpected token R in JSON at position 0. Double check if the 'auth-type' is correct. Refer to https://github.com/Azure/login#readme for more information.

[kornel-lugosi-lab49]

With @ v2 we are seeing some more info:

Login failed with SyntaxError: Unexpected token 'R', "Retrieving"... is not valid JSON. Double check if the 'auth-type' is correct.

Maybe we are not following redirects?

[Abhijitk914]

We are also facing same issue Azure login with few gihub action step but some of the steps executed successfully. Please find below logs of both the execution (failed and sucessfull)

------------Failed Logs ---------------

Run azure/login@v2
Running Azure CLI Login.
/usr/bin/az cloud set -n azurecloud
Done setting cloud: "azurecloud"
Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:*******/-azure-bicep:environment:
Attempting Azure CLI login by using OIDC...
Subscription is set successfully.
Azure CLI login succeeds by using OIDC.
Running Azure PowerShell Login.

---

Result: '/home/runner/.local/share/powershell/Modules/Az.Accounts/3.0.0/Az.Accounts.psd1',
Success: true

---

Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:*******/-azure-bicep:environment:cu8
Attempting Azure PowerShell login by using OIDC...
Error: Login failed with SyntaxError: Unexpected token 'R', "Retrieving"... is not valid JSON. Double check if the 'auth-type' is correct. Refer to https://github.com/Azure/login#readme for more information.

------------ Successful Logs ---------------

Run azure/login@v2
Running Azure CLI Login.
/usr/bin/az cloud set -n azurecloud
Done setting cloud: "azurecloud"
Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:*********/-azure-bicep:environment:**
Attempting Azure CLI login by using OIDC...
Subscription is set successfully.
Azure CLI login succeeds by using OIDC.
Running Azure PowerShell Login.

---

Result: '/usr/share/az_11.3.1/Az.Accounts/2.19.0/Az.Accounts.psd1',
Success: true

---

Federated token details:
issuer - https://token.actions.githubusercontent.com
subject claim - repo:*******************/**-azure-bicep:environment:
Attempting Azure PowerShell login by using OIDC...
*** Success: true, Result: '' ***
Running Azure PowerShell Login successfully.

[sandeep5234]

Login failed with SyntaxError: Unexpected token 'R', "Retrieving"... is not valid JSON. Double check if the 'auth-type' is correct.

we are seeing same issue as above, Most of our critical workflows are failing. Is anyone working to resolve this ?

[ealasgarov]

Workaround:
The issue is caused by Az.Accounts PS module. We had latest (3.0.0) installed on our self-hosted github runners and this was causing a problem. I've realized the azure/login github action works fine on managed (ubuntu-latest) runners where Az.Account ver. 2.19.0 is installed. Downgrading the version solves the issue.

[joannewilsonRel]

I am using "ubuntu-latest" and have one workflow that is running into this issue. Any other ideas on how to address this?

[paulanguiano]

Yan Xu (@YanaXu) please relabel this issue, as it was incorrectly triaged.

We have many workflows affected by this bug in the login action.

Because of our supply chain controls I've been unable to test with a downgraded Az.Accounts module, but I'm working on it.

[mblaschke-daimlertruck]

Can confirm this issue with a high number of affected workflows.

Why is this issue still not fixed and why are Az PowerShell modules not tested before they are released?