config appservice list: value at null instead of the one that I see in portal

Describe the bug

Command Name az webapp config appsettings list

Errors: Return "value": null instead of the correct one for some environment variables

  {
    "name": "DOCKER_REGISTRY_SERVER_PASSWORD",
    "slotSetting": false,
    "value": null
  },

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

• az webapp config appsettings list --name {} --resource-group {}

Expected Behavior

Having the right value that I see in portal.azure.com:

  {
    "name": "DOCKER_REGISTRY_SERVER_PASSWORD",
    "slotSetting": false,
    "value": "@Microsoft.KeyVault(VaultName=xxxxxxxxxxx;SecretName=xxxxxxxx)"
  },

Environment Summary

macOS-12.5.1-x86_64-i386-64bit, Darwin 21.6.0
Python 3.10.6
Installer: HOMEBREW

azure-cli 2.39.0

Additional Context

[panchagnula]

@sycured the reason in CLI these settings were masked because of security issue that passwords shouldn’t be displayed in plaintext. This an open issue on the platform end, that the GET API GET /subscriptions/e483435e-282d-4ac1-92b5-d6123f2aa360/resourceGroups/sisirap-rg/providers/Microsoft.Web/sites/clitestapp/config/slotConfigNames? shouldn’t return passwords , hence the masking change on CLI, Unfortunately we cannot change this behavior due to security concerns on CLI. For now the workaround would be to use az rest with the API to return these values. Thanks!

[RakeshMohanMSFT]

@sycured I do see masking logic in the code, but let me discuss internally and get back to you.