Feature Request: Support Azure Managed Identities for BYOK-style Auth

[SSSanghvi]

Hello,

I'd like to make a request for Azure Managed Identity authentication to use Github Copilot SDK with Azure AI Foundry resources.

Use case: This would allow developers to run Copilot SDK without a Github identity as part of a cloud-deployed application with a more secure method of authentication than a static text credential.

Expected Behavior:

1. Developer assigns their hosting compute (function app, VM, etc.) the Azure RBAC role needed to call LLM inferencing endpoints.
2. The SDK allows passing in Azure credential objects (e.g. DefaultAzureCredential()) when instantiating a BYOK session with Azure AI Foundry.
3. This allows the application to use Copilot SDK with its own Azure AI Foundry inferencing while not requiring a static text credential.

Scope: This is a request for all libraries, thought I personally need it in Python.

Authentication Mechanism: Azure Managed Identities.

Thank you.

[deepeshgurjar12344-lgtm]

‎test/scenarios/transport/stdio/rust/src/main.rs‎
+1
-3
Lines changed: 1 addition & 3 deletions
Original file line number Diff line number Diff line change
@@ -8,9 +8,7 @@ use github_copilot_sdk::{Client, ClientOptions};

#[tokio::main]
async fn main() -> Result<(), github_copilot_sdk::Error> {
let mut opts = ClientOptions::default();
opts.github_token = std::env::var("GITHUB_TOKEN").ok();
let client = Client::start(opts).await?;
let client = Client::start(ClientOptions::default()).await?;

let mut config = SessionConfig::default();
config.model = Some("claude-haiku-4.5".to_string());

‎test/scenarios/transport/stdio/typescript/src/index.ts‎
+4
-3
Lines changed: 4 additions & 3 deletions
Original file line number Diff line number Diff line change
@@ -1,9 +1,10 @@
import { CopilotClient , RuntimeConnection } from "@github/copilot-sdk";
import { CopilotClient, RuntimeConnection } from "@github/copilot-sdk";

async function main() {
const client = new CopilotClient({
connection: RuntimeConnection.forStdio({ path: process.env.COPILOT_CLI_PATH }),
gitHubToken: process.env.GITHUB_TOKEN,
connection: RuntimeConnection.forStdio({
path: process.env.COPILOT_CLI_PATH,
}),
});

try {
‎test/scenarios/transport/tcp/go/main.go‎
+4
-4
Lines changed: 4 additions & 4 deletions
Original file line number Diff line number Diff line change
@@ -41,8 +41,8 @@ func main() {
}

if response != nil {

if d, ok := response.Data.(*copilot.AssistantMessageData); ok {
fmt.Println(d.Content)
}
}
if d, ok := response.Data.(*copilot.AssistantMessageData); ok {
fmt.Println(d.Content)
}
}
}
‎test/scenarios/transport/tcp/rust/src/main.rs‎
-1
Lines changed: 0 additions & 1 deletion
Original file line number Diff line number Diff line change
@@ -22,7 +22,6 @@ async fn main() -> Result<(), github_copilot_sdk::Error> {
port,
connection_token: None,
};
opts.github_token = std::env::var("GITHUB_TOKEN").ok();
let client = Client::start(opts).await?;

let mut config = SessionConfig::default();

‎test/scenarios/transport/tcp/typescript/src/index.ts‎
+3
-1
Lines changed: 3 additions & 1 deletion
Original file line number Diff line number Diff line change
@@ -2,7 +2,9 @@ import { CopilotClient, RuntimeConnection } from "@github/copilot-sdk";

async function main() {
const client = new CopilotClient({
connection: RuntimeConnection.forUri(process.env.COPILOT_CLI_URL || "localhost:3000"),
connection: RuntimeConnection.forUri(
process.env.COPILOT_CLI_URL || "localhost:3000",
),
});

try {
0 commit comments
Comments
0
(0)
Comment
You're not receiving notifications from this thread.

[scottaddie]

@SSSanghvi This scenario is supported as of the v1.0.5 release across all languages. You can pass a callback to the bearer token provider property. That callback allows you to use any TokenCredential implementation from the Azure Identity SDK, such as DefaultAzureCredential or ManagedIdentityCredential. See the code samples at https://docs.github.com/copilot/how-tos/copilot-sdk/setup/azure-managed-identity#use-a-token-provider-callback.