Cannot pass PowerShell array as `$mylist` to Azure CLI

Related command

az ad app update

Describe the bug

–Using Powershell– Adding a redirect URI to an app is common practice for us. --web-redirect-uris is rather particular with how values are given to it. As of 2.37 with the migration of az ad to Microsoft Graph API, we use the following script to append a single URI to the list and it’s worked pretty well:

$app = az ad app show --id $appId | ConvertFrom-Json
$redirectUris = $app.web.redirectUris
$redirectUris += $newRedirectUri
$redirectUris = $redirectUris | ForEach-Object {"`"$_`""}
az ad app update --id $appId --web-redirect-uris $redirectUris

This has been sufficient until 2.40, where this no longer works. I have not been able to figure out a way to pass multiple URIs in a Powershell variable to --web-redirect-uris.

To Reproduce

Use Az CLI 2.39:

1. Create a App Registration in AAD. Add two or three redirect URIs. a. I.e., https://site1.example.com/signin-oidc, https://site2.example.com/signin-oidc
2. Assign a new URI to $newRedirectUri variable (or similar), and run the script snippet.
3. The command should be successful

$redirectUris should appear like so when printed to console:

"https://site1.example.com/signin-oidc"
"https://site2.example.com/signin-oidc"
"https://site3.example.com/signin-oidc"

Try again with Az CLI 2.40. It no longer works: One or more properties contains invalid values.

Expected behavior

At least in Powershell, each URI must be wrapped in quotes. Double quotes works for us because we’re using vars. This is achieved with line 4 of the script. Each URI must also be space separated as per the documentation. The $redirectUris variable is an array, however Powershell appears to just print out each URI sequentially when the command is run. It behaves like so: az ad app update --id $AppId --web-redirect-uris "https://site1.example.com/signin-oidc" "https://site2.example.com/signin-oidc" "https://site3.example.com/signin-oidc" "https://site4.example.com/signin-oidc" This satisfies the command as of 2.39.

Environment summary

Az CLI 2.40, Windows 11, Powershell 7

Additional context

There does not appear to be any changes to az ad for 2.40 according to the release notes. The --set flag doesn’t appear to be much use either. Perhaps I am using it wrong, but that’s outside of the scope of this issue. (If someone knows how to update redirect URIs using --set, I’d love to know how!

[jiasli]

Sometimes $mylist may contain only one item. @mylist will cause "abc" to be split:

> $mylist = "abc"
> az --debug @mylist
cli.knack.cli: Command arguments: ['--debug', 'a', 'b', 'c']

Instead, use

> $mylist = @("abc")
> az --debug @mylist
cli.knack.cli: Command arguments: ['--debug', 'abc']

See https://docs.microsoft.com/en-us/powershell/scripting/learn/deep-dives/everything-about-arrays?view=powershell-7.2

[kmkelly2015]

Thank you @jiasli , I second what @JackSch said, this has saved us a lot of pain.