67var resource = new EntraIdApplicationResource(name) 381var resource = new EntraIdApplicationResource(name) 442var resource = new EntraIdApplicationResource(name) 469var resource = new EntraIdApplicationResource(name);

1281var resource = new EntraIdApplicationResource("entra-api");

421private readonly EntraIdApplicationResource? _owner; 424private EntraIdResolvedPermission(EntraIdPermissionType type, string name, Guid? fixedId, EntraIdApplicationResource? owner, EntraIdScope? scope) 444public static EntraIdResolvedPermission ForScope(EntraIdApplicationResource owner, EntraIdScope scope) =>

11internal sealed record EntraIdPreAuthorizedClient(EntraIdApplicationResource Client, IReadOnlyList<EntraIdScope> Scopes); 23private EntraIdApiAccess(EntraIdApplicationResource? application, EntraIdApi? api) 29public static EntraIdApiAccess ForApplication(EntraIdApplicationResource application) => new(application, null); 33public EntraIdApplicationResource? Application { get; } 43public bool IsFor(EntraIdApplicationResource application) => ReferenceEquals(Application, application);

44public class EntraIdApplicationResource : AzureProvisioningResource, IResourceWithCustomWithReference<EntraIdApplicationResource> 50/// Initializes a new instance of the <see cref="EntraIdApplicationResource"/> class. 112static IResourceBuilder<TDestination>? IResourceWithCustomWithReference<EntraIdApplicationResource>.TryWithReference<TDestination>( 119if (source is not IResourceBuilder<EntraIdApplicationResource> application) 325var owners = new Dictionary<string, (EntraIdApplicationResource Source, string Entry, string Prefix)>(StringComparer.OrdinalIgnoreCase); 415private static BicepList<string> CreateRedirectUris(EntraIdApplicationResource resource, AzureResourceInfrastructure infrastructure) 494var resource = (EntraIdApplicationResource)infrastructure.AspireResource; 730private static MicrosoftGraphAppRole CreateAppRole(EntraIdApplicationResource resource, EntraIdAppRole role) 983internal virtual bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1020internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1112internal void ValidateConsumer(EntraIdApplicationResource application, IResource consumer) 1129EntraIdApplicationResource application, 1154internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1237internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1292internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1350internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext) 1386internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext)

22public EntraIdLocalDeveloperCertificateCredential(EntraIdApplicationResource application, DistributedApplicationExecutionContext executionContext) 37internal LocalDeveloperCertificate GetCertificate(EntraIdApplicationResource application) => 41internal async Task<LocalDeveloperCertificate> GetCertificateAsync(IServiceProvider services, EntraIdApplicationResource application, CancellationToken cancellationToken) 57internal override bool EmitEnvironmentVariables(IDictionary<string, object> envVars, string prefix, string separator, EntraIdApplicationResource application, IResource consumer, DistributedApplicationExecutionContext executionContext)

16internal sealed class EntraIdReferenceAnnotation(EntraIdApplicationResource source, string downstreamApisPrefix, string environmentVariablePrefix, bool isDotnetProgram) : IResourceAnnotation 18public EntraIdApplicationResource Source { get; } = source;

58public static IResourceBuilder<EntraIdApplicationResource> AddEntraIdApplication( 67var resource = new EntraIdApplicationResource(name) 76private static IResourceBuilder<EntraIdApplicationResource> ConfigureEntraIdResource( 77IResourceBuilder<EntraIdApplicationResource> resourceBuilder) 93EntraIdApplicationResource resource, 128EntraIdApplicationResource resource, 311private static Task PublishFailedToStartAsync(EntraIdApplicationResource resource, InitializeResourceEvent evt) 370public static IResourceBuilder<EntraIdApplicationResource> AddExistingEntraApplication( 381var resource = new EntraIdApplicationResource(name) 432public static IResourceBuilder<EntraIdApplicationResource> AddExistingEntraApplication( 442var resource = new EntraIdApplicationResource(name) 460internal static IResourceBuilder<EntraIdApplicationResource> AddExistingEntraApplicationForExport( 469var resource = new EntraIdApplicationResource(name); 474private static void SetExistingApplicationIds(EntraIdApplicationResource resource, object tenantId, object clientId) 531public static IResourceBuilder<EntraIdApplicationResource> AsExistingApplication( 532this IResourceBuilder<EntraIdApplicationResource> builder, 576public static IResourceBuilder<EntraIdApplicationResource> AsExistingApplication( 577this IResourceBuilder<EntraIdApplicationResource> builder, 602internal static IResourceBuilder<EntraIdApplicationResource> AsExistingApplicationForExport( 603this IResourceBuilder<EntraIdApplicationResource> builder, 630private static IResourceBuilder<EntraIdApplicationResource> ConfigureExistingApplication( 632EntraIdApplicationResource resource) 637private static IResourceBuilder<EntraIdApplicationResource> ConfigureExistingApplication( 638IResourceBuilder<EntraIdApplicationResource> builder) 681public static IResourceBuilder<EntraIdApplicationResource> RunWithLocalDeveloperCertificateCredential( 682this IResourceBuilder<EntraIdApplicationResource> builder) 718public static IResourceBuilder<EntraIdApplicationResource> WithClientSecret( 719this IResourceBuilder<EntraIdApplicationResource> builder, 768/// <see cref="PublishWithFederatedManagedIdentityCredential(IResourceBuilder{EntraIdApplicationResource})"/> 780public static IResourceBuilder<EntraIdApplicationResource> WithFederatedManagedIdentityCredential( 781this IResourceBuilder<EntraIdApplicationResource> builder, 806internal static IResourceBuilder<EntraIdApplicationResource> WithFederatedManagedIdentityCredentialForExport( 807this IResourceBuilder<EntraIdApplicationResource> builder, 829/// <see cref="PublishWithFederatedManagedIdentityCredential{T}(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{T})"/> 845/// <see cref="WithFederatedManagedIdentityCredential(IResourceBuilder{EntraIdApplicationResource}, string)"/> instead. 864public static IResourceBuilder<EntraIdApplicationResource> PublishWithFederatedManagedIdentityCredential( 865this IResourceBuilder<EntraIdApplicationResource> builder) 905/// <see cref="PublishWithFederatedManagedIdentityCredential(IResourceBuilder{EntraIdApplicationResource})"/>. 917public static IResourceBuilder<EntraIdApplicationResource> PublishWithFederatedManagedIdentityCredential<T>( 918this IResourceBuilder<EntraIdApplicationResource> builder, 970public static IResourceBuilder<EntraIdApplicationResource> PublishWithFederatedManagedIdentityCredential( 971this IResourceBuilder<EntraIdApplicationResource> builder, 1005internal static IResourceBuilder<EntraIdApplicationResource> PublishWithFederatedManagedIdentityCredentialForExport( 1006this IResourceBuilder<EntraIdApplicationResource> builder, 1021private static void ThrowIfExistingApplication(IResourceBuilder<EntraIdApplicationResource> builder) 1050public static IResourceBuilder<EntraIdApplicationResource> WithCertificateFromKeyVault( 1051this IResourceBuilder<EntraIdApplicationResource> builder, 1076public static IResourceBuilder<EntraIdApplicationResource> WithCertificateThumbprint( 1077this IResourceBuilder<EntraIdApplicationResource> builder, 1102public static IResourceBuilder<EntraIdApplicationResource> WithCertificateDistinguishedName( 1103this IResourceBuilder<EntraIdApplicationResource> builder, 1129internal static IResourceBuilder<EntraIdApplicationResource> WithCertificateFromFileForExport( 1130this IResourceBuilder<EntraIdApplicationResource> builder, 1150internal static IResourceBuilder<EntraIdApplicationResource> WithSignedAssertionFileForExport( 1151this IResourceBuilder<EntraIdApplicationResource> builder, 1170public static IResourceBuilder<EntraIdApplicationResource> WithCredential( 1171this IResourceBuilder<EntraIdApplicationResource> builder, 1194public static IResourceBuilder<EntraIdApplicationResource> WithInstance( 1195this IResourceBuilder<EntraIdApplicationResource> builder, 1248public static IResourceBuilder<EntraIdApplicationResource> WithSignInAudience( 1249this IResourceBuilder<EntraIdApplicationResource> builder, 1282public static IResourceBuilder<EntraIdApplicationResource> WithRedirectUris( 1283this IResourceBuilder<EntraIdApplicationResource> builder, 1314/// <see cref="WithRedirectUris(IResourceBuilder{EntraIdApplicationResource}, string[])"/>; URIs are registered in call order. 1329public static IResourceBuilder<EntraIdApplicationResource> WithRedirectUris( 1330this IResourceBuilder<EntraIdApplicationResource> builder, 1384public static IResourceBuilder<EntraIdApplicationResource> WithRedirectUris( 1385this IResourceBuilder<EntraIdApplicationResource> builder, 1433/// <see cref="WithRedirectUris(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{ParameterResource}[])"/>. 1445public static IResourceBuilder<EntraIdApplicationResource> WithRedirectUris( 1446this IResourceBuilder<EntraIdApplicationResource> builder, 1486internal static IResourceBuilder<EntraIdApplicationResource> WithRedirectUrisForExport( 1487this IResourceBuilder<EntraIdApplicationResource> builder, 1525/// Application and service principal ownership are separate; use <see cref="WithServicePrincipalOwners(IResourceBuilder{EntraIdApplicationResource}, string[])"/> 1536public static IResourceBuilder<EntraIdApplicationResource> WithApplicationOwners( 1537this IResourceBuilder<EntraIdApplicationResource> builder, 1553/// See <see cref="WithApplicationOwners(IResourceBuilder{EntraIdApplicationResource}, string[])"/> for permission and append semantics. 1556public static IResourceBuilder<EntraIdApplicationResource> WithApplicationOwners( 1557this IResourceBuilder<EntraIdApplicationResource> builder, 1574internal static IResourceBuilder<EntraIdApplicationResource> WithApplicationOwnersForExport( 1575this IResourceBuilder<EntraIdApplicationResource> builder, 1598/// append semantics and permission requirements as <see cref="WithApplicationOwners(IResourceBuilder{EntraIdApplicationResource}, string[])"/>. 1602public static IResourceBuilder<EntraIdApplicationResource> WithServicePrincipalOwners( 1603this IResourceBuilder<EntraIdApplicationResource> builder, 1619public static IResourceBuilder<EntraIdApplicationResource> WithServicePrincipalOwners( 1620this IResourceBuilder<EntraIdApplicationResource> builder, 1637internal static IResourceBuilder<EntraIdApplicationResource> WithServicePrincipalOwnersForExport( 1638this IResourceBuilder<EntraIdApplicationResource> builder, 1658/// Equivalent to calling <see cref="WithApplicationOwners(IResourceBuilder{EntraIdApplicationResource}, string[])"/> and 1659/// <see cref="WithServicePrincipalOwners(IResourceBuilder{EntraIdApplicationResource}, string[])"/> with the same IDs. 1662public static IResourceBuilder<EntraIdApplicationResource> WithOwners( 1663this IResourceBuilder<EntraIdApplicationResource> builder, 1676public static IResourceBuilder<EntraIdApplicationResource> WithOwners( 1677this IResourceBuilder<EntraIdApplicationResource> builder, 1691internal static IResourceBuilder<EntraIdApplicationResource> WithOwnersForExport( 1692this IResourceBuilder<EntraIdApplicationResource> builder, 1760public static IResourceBuilder<EntraIdApplicationResource> WithAppRole( 1761this IResourceBuilder<EntraIdApplicationResource> builder, 1806internal static IResourceBuilder<EntraIdApplicationResource> WithAppRoleForExport( 1807this IResourceBuilder<EntraIdApplicationResource> builder, 1859public static IResourceBuilder<EntraIdApplicationResource> WithIdTokenIssuance( 1860this IResourceBuilder<EntraIdApplicationResource> builder) 1875public static IResourceBuilder<EntraIdApplicationResource> WithClientCapability( 1876this IResourceBuilder<EntraIdApplicationResource> builder, 1892public static IResourceBuilder<EntraIdApplicationResource> WithAllowWebApiToBeAuthorizedByACL( 1893this IResourceBuilder<EntraIdApplicationResource> builder) 1911public static IResourceBuilder<EntraIdApplicationResource> WithSendX5C( 1912this IResourceBuilder<EntraIdApplicationResource> builder) 1928public static IResourceBuilder<EntraIdApplicationResource> WithExtraQueryParameter( 1929this IResourceBuilder<EntraIdApplicationResource> builder, 1948public static IResourceBuilder<EntraIdApplicationResource> WithAudience( 1949this IResourceBuilder<EntraIdApplicationResource> builder, 1969/// <see cref="WithScope"/> uses this URI unless <see cref="WithApplicationIdUri(IResourceBuilder{EntraIdApplicationResource}, string)"/> sets another one. 1973/// <see cref="WithApplicationIdUri(IResourceBuilder{EntraIdApplicationResource}, string)"/> with the URI it already has. 1977public static IResourceBuilder<EntraIdApplicationResource> WithApplicationIdUri( 1978this IResourceBuilder<EntraIdApplicationResource> builder) 2010/// <see cref="EntraIdApplicationResource.GetScopeUri(string)"/> uses the URI to build scope names for callers. 2014public static IResourceBuilder<EntraIdApplicationResource> WithApplicationIdUri( 2015this IResourceBuilder<EntraIdApplicationResource> builder, 2044internal static IResourceBuilder<EntraIdApplicationResource> WithApplicationIdUriForExport( 2045this IResourceBuilder<EntraIdApplicationResource> builder, 2068/// Unless an application ID URI is set with <see cref="WithApplicationIdUri(IResourceBuilder{EntraIdApplicationResource}, string)"/>, 2087public static IResourceBuilder<EntraIdApplicationResource> WithScope( 2088this IResourceBuilder<EntraIdApplicationResource> builder, 2102var resource = builder.Resource; 2135internal static IResourceBuilder<EntraIdApplicationResource> WithScopeForExport( 2136this IResourceBuilder<EntraIdApplicationResource> builder, 2180this IResourceBuilder<EntraIdApplicationResource> builder, 2201/// Pre-authorization is separate from the client's declaration of the permission (<see cref="WithApiPermissions(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{EntraIdApplicationResource}, string[])"/>) 2202/// and from consent (<see cref="WithAdminConsent(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{EntraIdApplicationResource}, string[])"/>). 2212public static IResourceBuilder<EntraIdApplicationResource> WithPreAuthorizedApplication( 2213this IResourceBuilder<EntraIdApplicationResource> builder, 2214IResourceBuilder<EntraIdApplicationResource> client, 2251/// (<see cref="WithAdminConsent(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{EntraIdApplicationResource}, string[])"/>) 2268public static IResourceBuilder<EntraIdApplicationResource> WithApiPermissions( 2269this IResourceBuilder<EntraIdApplicationResource> builder, 2270IResourceBuilder<EntraIdApplicationResource> api, 2277var apiResource = api.Resource; 2308/// <see cref="WithAdminConsent(IResourceBuilder{EntraIdApplicationResource}, EntraIdApi, EntraIdApiPermission[])"/> to opt in to consent. 2323public static IResourceBuilder<EntraIdApplicationResource> WithApiPermissions( 2324this IResourceBuilder<EntraIdApplicationResource> builder, 2363internal static IResourceBuilder<EntraIdApplicationResource> WithExternalApiPermissionsForExport( 2364this IResourceBuilder<EntraIdApplicationResource> builder, 2377/// <param name="scopeNames">The names of scopes already declared with <see cref="WithApiPermissions(IResourceBuilder{EntraIdApplicationResource}, IResourceBuilder{EntraIdApplicationResource}, string[])"/>.</param> 2399public static IResourceBuilder<EntraIdApplicationResource> WithAdminConsent( 2400this IResourceBuilder<EntraIdApplicationResource> builder, 2401IResourceBuilder<EntraIdApplicationResource> api, 2408var apiResource = api.Resource; 2424/// <param name="permissions">Permissions already declared with <see cref="WithApiPermissions(IResourceBuilder{EntraIdApplicationResource}, EntraIdApi, EntraIdApiPermission[])"/>.</param> 2459public static IResourceBuilder<EntraIdApplicationResource> WithAdminConsent( 2460this IResourceBuilder<EntraIdApplicationResource> builder, 2501internal static IResourceBuilder<EntraIdApplicationResource> WithExternalApiAdminConsentForExport( 2502this IResourceBuilder<EntraIdApplicationResource> builder, 2553private static EntraIdScope[] FindScopes(EntraIdApplicationResource api, string[] scopeNames, string parameterName) 2586EntraIdApplicationResource caller, 2623private static void EnsureNoDependencyCycle(EntraIdApplicationResource dependent, EntraIdApplicationResource dependency) 2633static bool DependsOn(EntraIdApplicationResource from, EntraIdApplicationResource target, HashSet<EntraIdApplicationResource> visited) 2641var dependencies = from.ApiAccess.Select(a => a.Application).OfType<EntraIdApplicationResource>() 2643foreach (var dependency in dependencies) 2710IResourceBuilder<EntraIdApplicationResource> source, 2753IResourceBuilder<EntraIdApplicationResource> source, 2761IResourceBuilder<EntraIdApplicationResource> source, 2767var entra = source.Resource; 2865EntraIdApplicationResource.ValidateConsumerReferences(builder.Resource);

26EntraIdApplicationResource resource, 55EntraIdApplicationResource resource, 145EntraIdApplicationResource resource, 202private static BicepValue<string> GetClientId(EntraIdApplicationResource application, AzureResourceInfrastructure infrastructure, EntraIdSymbolNames symbolNames) => application.ClientIdValue switch

37public string ApplicationIdentity(EntraIdApplicationResource application) => Get(application, "ApplicationIdentity", "applicationIdentity"); 40public string ClientId(EntraIdApplicationResource application) => Get(application, "ClientId", $"{Base(application)}ClientId"); 57private static string Base(EntraIdApplicationResource application) => StartWithLetter(Infrastructure.NormalizeBicepIdentifier(application.Name));

880foreach (var resource in new[] { created.Resource, existing.Resource }) 1337private static (IResourceBuilder<EntraIdApplicationResource> First, IResourceBuilder<EntraIdApplicationResource> Second) AddTwoClientsOfOneApi(IDistributedApplicationBuilder builder) 1390private static IResourceBuilder<EntraIdApplicationResource> AddClientOfTwoApisNamedAfterTheirConsumers(IDistributedApplicationBuilder builder)

456EntraIdApplicationResource? startedResource = null; 496if (resource is EntraIdApplicationResource { IsExistingApplication: false })

508[typeof(DistributedApplication).Assembly, typeof(AzureProvisioningResource).Assembly, typeof(EntraIdApplicationResource).Assembly]); 510private static void DispatchReference<T>(IResourceBuilder<T> consumer, IResourceBuilder<EntraIdApplicationResource> source,

1264var created = Assert.Single(builder.Resources.OfType<EntraIdApplicationResource>(), resource => resource.Name == "created");

28var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 48var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 67var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 194var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 212var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 230var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 310var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 327var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 344var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 362var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 379var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 462var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 480var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 1065var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 1086var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 1109var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>()); 1281var resource = new EntraIdApplicationResource("entra-api"); 1358container.WithReference(source: (IResourceBuilder<EntraIdApplicationResource>)null!, connectionName: "AzureAd")); 1382var resource = Assert.Single(appModel.Resources.OfType<EntraIdApplicationResource>());

17IResourceBuilder<EntraIdApplicationResource> entraWeb;