# 3.2.7

**Release Date:** March 24, 2026

---

## 🐛 Bug Fixes

### Terraform Modules

#### Fix: AZURE_TOKEN_CREDENTIALS for Aspire 13.2 Credential Compatibility 🔧

**Module:** `src/terraform/saif-api-service`

**PR:** [#532](https://github.com/saif-corp/forge/pull/532)

Adds `AZURE_TOKEN_CREDENTIALS = "environmentcredential"` to the app settings of the `saif-api-service` Terraform module, restoring Service Principal authentication compatibility after the Aspire 13.2 upgrade.

**Root Cause:**

Aspire 13.2 introduced a breaking change to `AzureCredentialHelper` where the presence of `AZURE_CLIENT_ID` is now interpreted as a signal to use `ManagedIdentityCredential` instead of `EnvironmentCredential`. Apps deployed outside Aspire's own provisioner that rely on Service Principal auth via `AZURE_CLIENT_ID` + `AZURE_CLIENT_SECRET` + `AZURE_TENANT_ID` were silently broken.

**What Changed:**

- ✅ **Explicit credential selection** — `AZURE_TOKEN_CREDENTIALS=environmentcredential` restores the pre-13.2 behavior
- ✅ **No application code changes required** — fix is entirely in the Terraform module
- ✅ **Aligned with Aspire guidance** — follows the [Azure Default Credential in Aspire](https://aspire.dev/integrations/cloud/azure/azure-default-credential/) documentation

**Benefits:**

- 🚀 Applications using Service Principal auth continue working after Aspire 13.2 upgrade
- 🔒 Prevents unintended fallback to `ManagedIdentityCredential` when `AZURE_CLIENT_ID` is set for SP auth
- 🔄 No migration required — update the Terraform module and re-apply

---

## 📚 Documentation

### New Documentation

#### Platform Overview 🏗️

**File:** `docs/`

Added comprehensive platform overview documentation covering the Forge platform's technology stack, architecture, and capabilities. Developers new to the platform now have a single reference document explaining the foundational services, tool choices, and integration points.

---

### Updated Documentation

#### Secrets Documentation — Production Environment Prefix 🔑

**PR:** [#526](https://github.com/saif-corp/forge/pull/526)

Corrected the production environment prefix in the secrets documentation to match the actual naming convention used by the platform (`PROD` instead of `PRODUCTION`). Teams configuring environment-specific secrets in CI/CD pipelines should verify their secret names align with the updated guidance.

#### Platform Overview — Technology Stack Details 🛠️

Updated the platform overview documentation with additional technology stack details including version references and integration specifics.

---

## 📦 Dependencies

### .NET Packages

The following .NET packages were updated:

| Package | Change | PR |
|---|---|---|
| `Aspire.Hosting` | `13.1.3` → `13.2.0` | [#531](https://github.com/saif-corp/forge/pull/531) |
| `Aspire.Oracle.EntityFrameworkCore` | `13.1.3` → `13.2.0` | [#531](https://github.com/saif-corp/forge/pull/531) |
| `Microsoft.Kiota.Abstractions` | `1.22.0` → `1.22.1` | [#527](https://github.com/saif-corp/forge/pull/527) |
| `Microsoft.Kiota.Authentication.Azure` | `1.22.0` → `1.22.1` | [#527](https://github.com/saif-corp/forge/pull/527) |
| `Microsoft.Kiota.Http.HttpClientLibrary` | `1.22.0` → `1.22.1` | [#527](https://github.com/saif-corp/forge/pull/527) |
| `Microsoft.Kiota.Serialization.*` | `1.22.0` → `1.22.1` | [#527](https://github.com/saif-corp/forge/pull/527) |

> ⚠️ **Aspire 13.2 Note:** Teams upgrading to Aspire 13.2 should ensure `AZURE_TOKEN_CREDENTIALS=environmentcredential` is set if using Service Principal auth. See the bug fix above. Full breaking changes listed at [aspire.dev/whats-new/aspire-13-2](https://aspire.dev/whats-new/aspire-13-2/).

### TypeScript Packages

| Package | Change | PR |
|---|---|---|
| `flatted` | `3.4.1` → `3.4.2` | [#529](https://github.com/saif-corp/forge/pull/529), [#530](https://github.com/saif-corp/forge/pull/530) |

---

## 🔄 Breaking Changes

None in this release ✅

---

## 📋 Additional Notes

- Total commits: 9
- Files changed: 17
- Contributors: Emmitt Johnson, Jason Coria Corona Yue

---

### Support

- 📧 Teams Support Channel: [Support](https://teams.microsoft.com/l/channel/19%3Acb611810fb0b42b080cfff5590bdd51c%40thread.tacv2/Support?groupId=514d2dac-2d62-48ce-bf99-0fa0ce39469c&tenantId=a86cb8ed-369b-4df5-ace5-43811f6e08cf)

---