Fix empty/whitespace azureTenantId falling through to malformed URL

??-coalescing only substitutes for null/undefined, so an empty or
whitespace-only azureTenantId would build
`https://login.microsoftonline.com//v2.0/...` (double slash) and surface
as an opaque Azure 404. Trim first and use || so any falsy/blank value
falls back to /organizations/ like the unset case.

Co-authored-by: Isaac

Author: msrathore-db

lib/connection/auth/DatabricksOAuth/OAuthManager.ts

@@ -277,7 +277,9 @@ export class AzureOAuthManager extends OAuthManager {
   public static datatricksAzureApp = '2ff814a6-3304-4ab8-85cb-cd0e6f879c1d';
 
   protected getOIDCConfigUrl(): string {
-    const tenantPath = this.options.azureTenantId ?? 'organizations';
+    // Use logical OR so empty / whitespace-only azureTenantId also falls back to /organizations/
+    // (`??` only substitutes for null/undefined, leaving `''` to produce a malformed `//v2.0/...` URL).
+    const tenantPath = this.options.azureTenantId?.trim() || 'organizations';
     return `https://login.microsoftonline.com/${tenantPath}/v2.0/.well-known/openid-configuration`;
   }
 

tests/unit/connection/auth/DatabricksOAuth/OAuthManager.test.ts

@@ -547,6 +547,14 @@ describe('AzureOAuthManager (tenant awareness)', () => {
       const url = call<string>(mgr, 'getOIDCConfigUrl');
       expect(url).to.equal(`https://login.microsoftonline.com/${tenant}/v2.0/.well-known/openid-configuration`);
     });
+
+    it('falls back to /organizations/ when azureTenantId is empty or whitespace', () => {
+      for (const tenant of ['', '   ']) {
+        const mgr = makeAzure({ azureTenantId: tenant });
+        const url = call<string>(mgr, 'getOIDCConfigUrl');
+        expect(url).to.equal('https://login.microsoftonline.com/organizations/v2.0/.well-known/openid-configuration');
+      }
+    });
   });
 
   describe('getScopes — resource ID is always the Azure Login App, never a tenant GUID', () => {