Lydia Vilchez f2d0e714c8 fix(azure): enforce certificate token timeout at the HTTP transport ...

Replace the `ThreadPoolExecutor` + `future.result(timeout=...)` pattern
in `verify_client`'s certificate path with a `RequestsTransport` that
carries the connection/read deadlines. The executor approach could
not cancel a running `credential.get_token`, so timed-out or otherwise
failing calls left the underlying worker and network request alive:
under Entra ID degradation the API and Celery paths accumulated
background workers, and non-timeout exceptions bypassed executor
shutdown entirely.

Transport-layer timeouts terminate the request itself, so there is no
worker to leak and no cleanup path to miss. Translate the resulting
`ServiceRequestError` to `AzureCredentialsUnavailableError` to keep the
existing contract for `verify_client` and `test_connection`.

Update the timeout and leaf-first tests to match the new codepath.

2026-08-31 18:22:56 +02:00

..

config

…

contrib/wazuh

…

dashboard

…

github

…

lib

…

providers

fix(azure): enforce certificate token timeout at the HTTP transport

2026-08-31 18:22:56 +02:00

util

…