test.ps1

#!/usr/bin/env pwsh

# A Windows domain user should be able to run this against a feed in an AAD-back AzDO org
# and all scenarios should succeed non-interactively.

param(
    [Parameter(Mandatory = $true, Position = 0)]
    [string]$TestFeed
)

if ([string]::IsNullOrEmpty($TestFeed)) {
    Write-Host "Please specify an AzDO organization package feed URL as the first parameter." -ForegroundColor Red
    exit 1
}

$env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_ENABLED = "true"
$env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION = Join-Path ([System.IO.Path]::GetTempPath()) "msal.cache"

if (Test-Path $env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION) {
    Remove-Item $env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION -Force
}

function Test-Frameworks {
    param(
        [string]$TestFeedUrl
    )
    
    if ($IsWindows) {
        $frameworks = @("net481", "net6.0", "net8.0")
    } else {
        $frameworks = @("net6.0", "net8.0")
    }
    
    foreach ($framework in $frameworks) {
        # Clean up credential cache files
        $credProviderPath = Join-Path ([Environment]::GetFolderPath('LocalApplicationData')) "MicrosoftCredentialProvider" "*.dat"
        if (Test-Path $credProviderPath) {
            Write-Host "Removing credential cache files at $credProviderPath" -ForegroundColor Yellow
            Remove-Item $credProviderPath -Force -ErrorAction SilentlyContinue
        }
        
        if (Test-Path $env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION) {
            Write-Host "Removing MSAL file cache at $env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION" -ForegroundColor Yellow
            Remove-Item $env:NUGET_CREDENTIALPROVIDER_MSAL_FILECACHE_LOCATION -Force -ErrorAction SilentlyContinue
        }
        
        Write-Host "Testing $framework with NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER=$env:NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER" -ForegroundColor Cyan
        $logFile = "test.$framework"
        if ($env:NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER -eq "true") {
            $logFile += ".withbroker"
        } else {
            $logFile += ".nobroker"
        }
        if ($env:ARTIFACTS_CREDENTIALPROVIDER_RETURN_ENTRA_TOKENS -eq "true") {
            $logFile += ".entratoken"
        }
        $logFile = "$logFile.log"

        # Point the file logger at the same log file so it captures full diagnostics
        $env:ARTIFACTS_CREDENTIALPROVIDER_LOG_PATH = (Join-Path $PSScriptRoot $logFile)
        
        $projectPath = Join-Path "CredentialProvider.Microsoft" "CredentialProvider.Microsoft.csproj"
        $command = "dotnet run --no-restore --no-build -f $framework --project $projectPath -- -C -U $TestFeedUrl -V Debug -R"
        Write-Host $command -ForegroundColor Gray
        
        # Execute the command (file logger captures full diagnostics via ARTIFACTS_CREDENTIALPROVIDER_LOG_PATH)
        try {
            & dotnet run --no-restore --no-build -f $framework --project $projectPath -- -C -U $TestFeedUrl -V Debug -R | Out-Null
            $exitCode = $LASTEXITCODE
        }
        catch {
            $exitCode = 1
            Write-Host "Command execution failed: $_" -ForegroundColor Red
        }
        
        if ($exitCode -ne 0) {
            Write-Host "Previous command execution failed: $exitCode" -ForegroundColor Red
            return $exitCode
        }
    }
    
    return 0
}

Write-Host "Testing MSAL with Entra Token Opt-in" -ForegroundColor Green
$env:NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER = "true"
$env:ARTIFACTS_CREDENTIALPROVIDER_RETURN_ENTRA_TOKENS = "true"
$result = Test-Frameworks -TestFeedUrl $TestFeed
if ($result -ne 0) {
    Write-Host "Failed: $result" -ForegroundColor Red
    exit $result
}

Write-Host "Testing MSAL without broker" -ForegroundColor Green
$env:NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER = "false"
$env:ARTIFACTS_CREDENTIALPROVIDER_RETURN_ENTRA_TOKENS = "false"
$result = Test-Frameworks -TestFeedUrl $TestFeed
if ($result -ne 0) {
    Write-Host "Failed: $result" -ForegroundColor Red
    exit $result
}

Write-Host "Testing MSAL with broker" -ForegroundColor Green
$env:NUGET_CREDENTIALPROVIDER_MSAL_ALLOW_BROKER = "true"
$env:ARTIFACTS_CREDENTIALPROVIDER_RETURN_ENTRA_TOKENS = "false"
$result = Test-Frameworks -TestFeedUrl $TestFeed
if ($result -ne 0) {
    Write-Host "Failed: $result" -ForegroundColor Red
    exit $result
}

Write-Host "All tests passed!" -ForegroundColor Green
exit 0