appservice - set allowed_applications in the expand for `active_d…

…irectory_v2` (#26462)

* set allowed applications in the request payload

* update tests for all resources affected

internal/services/appservice/helpers/auth_v2_schema.go

@@ -994,6 +994,16 @@ func expandAadAuthV2Settings(input []AadAuthV2Settings) *webapps.AzureActiveDire
 			}
 			result.Validation.AllowedAudiences = pointer.To(aad.AllowedAudiences)
 		}
+
+		if len(aad.AllowedApplications) > 0 {
+			if result.Validation == nil {
+				result.Validation = &webapps.AzureActiveDirectoryValidation{}
+			}
+			if result.Validation.DefaultAuthorizationPolicy == nil {
+				result.Validation.DefaultAuthorizationPolicy = &webapps.DefaultAuthorizationPolicy{}
+			}
+			result.Validation.DefaultAuthorizationPolicy.AllowedApplications = pointer.To(aad.AllowedApplications)
+		}
 	}
 
 	return result

internal/services/appservice/linux_function_app_resource_authv2_test.go

@@ -305,6 +305,7 @@ resource "azurerm_linux_function_app" "test" {
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
       allowed_groups             = [azuread_group.test.object_id]
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
 
     login {

internal/services/appservice/linux_function_app_slot_resource_authv2_test.go

@@ -267,6 +267,7 @@ resource "azurerm_linux_function_app_slot" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }

internal/services/appservice/linux_web_app_resource_authv2_test.go

@@ -274,6 +274,7 @@ resource "azurerm_linux_web_app" "test" {
         "activedirectorytokenaudiences",
       ]
       tenant_auth_endpoint = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications = ["WhoopsMissedThisOne"]
     }
 
 

internal/services/appservice/linux_web_app_slot_resource_authv2_test.go

@@ -191,6 +191,7 @@ resource "azurerm_linux_web_app_slot" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }

internal/services/appservice/windows_function_app_resource_authv2_test.go

@@ -258,6 +258,7 @@ resource "azurerm_windows_function_app" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }

internal/services/appservice/windows_function_app_slot_resource_authv2_test.go

@@ -251,6 +251,7 @@ resource "azurerm_windows_function_app_slot" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }

internal/services/appservice/windows_web_app_resource_authv2_test.go

@@ -242,6 +242,7 @@ resource "azurerm_windows_web_app" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }

internal/services/appservice/windows_web_app_slot_resource_authv2_test.go

@@ -191,6 +191,7 @@ resource "azurerm_windows_web_app_slot" "test" {
       client_id                  = data.azurerm_client_config.current.client_id
       client_secret_setting_name = "%[3]s"
       tenant_auth_endpoint       = "https://sts.windows.net/%[5]s/v2.0"
+      allowed_applications       = ["WhoopsMissedThisOne"]
     }
     login {}
   }