fix

Author: madhav-db

.github/workflows/token-federation-test.yml

@@ -122,7 +122,7 @@ jobs:
               # Fix audience handling
               modified = content.replace(
                   'def _exchange_token(self, token, force_refresh=False):',
-                  'def _exchange_token(self, token, force_refresh=False):\\n        # Additional handling for different audience formats\\n        import jwt\\n        try:\\n            # Try both standard and alternative audience formats\\n            audience_tried = False\\n            \\n            def try_with_audience(token, audience):\\n                nonlocal audience_tried\\n                if audience_tried:\\n                    return None\\n                    \\n                audience_tried = True\\n                decoded = jwt.decode(token, options={\"verify_signature\": False})\\n                aud = decoded.get(\"aud\")\\n                \\n                # Check if aud is a list and convert to string if needed\\n                if isinstance(aud, list) and len(aud) > 0:\\n                    aud = aud[0]\\n                    \\n                # Print audience for debugging\\n                print(f\"Original token audience: {aud}\")\\n                \\n                if aud != audience:\\n                    print(f\"WARNING: Token audience \\\'{aud}\\\' doesn\\\'t match expected audience \\\'{audience}\\\'\")\\n                    # We won\\\'t modify the token as that would invalidate the signature\\n                \\n                return None\\n                \\n            # We\\\'re just collecting debugging info, not modifying the token\\n            try_with_audience(token, \"https://github.com/databricks\")\\n            \\n        except Exception as e:\\n            print(f\"Audience debug error: {str(e)}\")'
+                  'def _exchange_token(self, token, force_refresh=False):\\n        # Additional handling for different audience formats\\n        import jwt\\n        try:\\n            # Try both standard and alternative audience formats\\n            audience_tried = False\\n            \\n            def try_with_audience(token, audience):\\n                nonlocal audience_tried\\n                if audience_tried:\\n                    return None\\n                    \\n                audience_tried = True\\n                decoded = jwt.decode(token, options={\"verify_signature\": False})\\n                aud = decoded.get(\"aud\")\\n                \\n                # Check if aud is a list and convert to string if needed\\n                if isinstance(aud, list) and len(aud) > 0:\\n                    aud = aud[0]\\n                    \\n                # Print audience for debugging\\n                print(f\"Original token audience: {aud}\")\\n                \\n                if aud != audience:\\n                    print(f\"WARNING: Token audience \'{aud}\' doesn\'t match expected audience \'{audience}\'\")\\n                    # We won\'t modify the token as that would invalidate the signature\\n                \\n                return None\\n                \\n            # We\'re just collecting debugging info, not modifying the token\\n            try_with_audience(token, \"https://github.com/databricks\")\\n            \\n        except Exception as e:\\n            print(f\"Audience debug error: {str(e)}\")'
               )
               
               with open('src/databricks/sql/auth/token_federation.py', 'w') as f: