Accessing secret variables from release task about azure-pipelines-task-lib

[ericsciple]

you can use getEndpointAuthorizationParameter('SystemVssConnection', 'AccessToken') to access the job token

i believe a 2x agent (2.105.7 would be a good backstop - i.e. TFS 2017 RTM agent) is required in order access secret variables.

if using the job token is not good for your scenario, then i would suggest switching to an input instead of relying on user to set a specific variable. then the user can pass their secret variable into the input - e.g. $(myusername)

[apucacao]

I forgot to mention that we're using vsts-task-lib version 0.5.11.

[apucacao]

Thanks @ericsciple, I can try that. One question though: how do I pass the job token along with request to VSTS? Do I need to set a header? Currently we're using basic authentication.

[ericsciple]

i think you can pass it as the password. you may need to pass some dummy value for the username (e.g. abc). also i would recommend using bearer instead of basic since it does not require basic to be enabled for tfs on-prem installations.

also, i'm not familiar with the details, but you could also see what the nuget task does and use that as a go-by.

[ericsciple]

...if you use the nuget task as a go-by, look for getSystemAccessToken

[bryanmacfarlane]

You need to set the bearer header

https://github.com/Microsoft/vsts-node-api/blob/master/api/handlers/bearertoken.ts

If you use node api, you can construct it with that auth handler.