There is a command group 'az_containerapp_auth'. This group of commands could 'manage containerapp authentication and authorization'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_containerapp_auth_update'.The syntax is: az containerapp auth update [--action {allowanonymous, redirecttologinpage, return401, return403}]
                            [--config-file-path]
                            [--custom-host-header]
                            [--custom-proto-header]
                            [--enabled {false, true}]
                            [--excluded-paths]
                            [--ids]
                            [--name]
                            [--proxy-convention {custom, noproxy, standard}]
                            [--redirect-provider]
                            [--require-https {false, true}]
                            [--resource-group]
                            [--runtime-version]
                            [--set]
                            [--subscription]. The 1th example of the child command would be to use it to 'update the client id of the aad provider already configured', the syntax is: az containerapp auth update -g myResourceGroup --name my-containerapp --set identityProviders.azureActiveDirectory.registration.clientId=my-client-id. The 2th example of the child command would be to use it to 'configure the app with file based authentication by setting the config file path', the syntax is: az containerapp auth update -g myResourceGroup --name my-containerapp --config-file-path D:\home\site\wwwroot\auth.json. The 3th example of the child command would be to use it to 'configure the app to allow unauthenticated requests to hit the app', the syntax is: az containerapp auth update -g myResourceGroup --name my-containerapp --unauthenticated-client-action AllowAnonymous. The 4th example of the child command would be to use it to 'configure the app to redirect unauthenticated requests to the facebook provider', the syntax is: az containerapp auth update -g myResourceGroup --name my-containerapp --redirect-provider Facebook. The 5th example of the child command would be to use it to 'configure the app to listen to the forward headers x forwarded host and x forwarded proto', the syntax is: az containerapp auth update -g myResourceGroup --name my-containerapp --proxy-convention Standard. The parameter '--action --unauthenticated-client-action' is optional. the action to take when an unauthenticated client attempts to access the app.. The parameter '--config-file-path' is optional. the path of the config file containing auth settings if they come from a file.. The parameter '--custom-host-header --proxy-custom-host-header' is optional. the name of the header containing the host of the request.. The parameter '--custom-proto-header --proxy-custom-proto-header' is optional. the name of the header containing the scheme of the request.. The parameter '--enabled' is optional. true if the authentication / authorization feature is enabled for the current app; otherwise, false.. The parameter '--excluded-paths' is optional. the list of paths that should be excluded from authentication rules.. The parameter '--ids' is optional. one or more resource ids (space-delimited). it should be a complete resource id containing all information of 'resource id' arguments. you should provide either --ids or other 'resource id' arguments.. The parameter '--name -n' is optional. the name of the containerapp. a name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.. The parameter '--proxy-convention' is optional. the convention used to determine the url of the request made.. The parameter '--redirect-provider' is optional. the default authentication provider to use when multiple providers are configured.. The parameter '--require-https' is optional. false if the authentication/authorization responses not having the https scheme are permissible; otherwise, true.. The parameter '--resource-group -g' is optional. name of resource group. you can configure the default group using `az configure --defaults group=<name>`.. The parameter '--runtime-version' is optional. the runtimeversion of the authentication / authorization feature in use for the current app.. The parameter '--set' is optional. value of a specific field within the configuration settings for the azure app service authentication / authorization feature.. The parameter '--subscription' is optional. name or id of subscription. you can configure the default subscription using `az account set -s name_or_id`.. 