@azure/identity 2.1.0-alpha.20220520.1 → 2.1.0-alpha.20220615.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of @azure/identity might be problematic. Click here for more details.
package/README.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
|
|
1
|
+
# Azure Identity client library for JavaScript
|
|
2
2
|
|
|
3
3
|
The Azure Identity library provides [Azure Active Directory (Azure AD)](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis) token authentication through a set of convenient [TokenCredential](https://docs.microsoft.com/javascript/api/@azure/core-auth/tokencredential) implementations.
|
|
4
4
|
|
|
@@ -125,7 +125,7 @@ If used from Node.js, the `DefaultAzureCredential` will attempt to authenticate
|
|
|
125
125
|
1. **Environment** - The `DefaultAzureCredential` will read account information specified via [environment variables](#environment-variables) and use it to authenticate.
|
|
126
126
|
1. **Managed Identity** - If the application is deployed to an Azure host with Managed Identity enabled, the `DefaultAzureCredential` will authenticate with that account.
|
|
127
127
|
1. **Visual Studio Code** - If the developer has authenticated with the [Visual Studio Code Azure Account extension](https://marketplace.visualstudio.com/items?itemName=ms-vscode.azure-account), the `DefaultAzureCredential` will authenticate using that account.
|
|
128
|
-
|
|
128
|
+
- In `@azure/identity` version 2.0 or later, the [`@azure/identity-vscode`](https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/identity/identity-vscode) package must be installed for the Visual Studio Code authentication to work.
|
|
129
129
|
1. **Azure CLI** - If the developer has authenticated an account via the Azure CLI `az login` command, the `DefaultAzureCredential` will authenticate with that account.
|
|
130
130
|
1. **Azure PowerShell** - If the developer has authenticated using the Azure PowerShell module `Connect-AzAccount` command, the `DefaultAzureCredential` will authenticate with that account.
|
|
131
131
|
|
|
@@ -237,7 +237,7 @@ const credential = new ClientSecretCredential(
|
|
|
237
237
|
"<YOUR_CLIENT_ID>",
|
|
238
238
|
"<YOUR_CLIENT_SECRET>",
|
|
239
239
|
{
|
|
240
|
-
authorityHost: AzureAuthorityHosts.AzureGovernment
|
|
240
|
+
authorityHost: AzureAuthorityHosts.AzureGovernment,
|
|
241
241
|
}
|
|
242
242
|
);
|
|
243
243
|
```
|
|
@@ -246,37 +246,38 @@ Not all credentials require this configuration. Credentials that authenticate th
|
|
|
246
246
|
|
|
247
247
|
## Credential Classes
|
|
248
248
|
|
|
249
|
-
### Authenticating Azure
|
|
249
|
+
### Authenticating Azure-hosted applications
|
|
250
250
|
|
|
251
|
-
|
|
|
252
|
-
|
|
|
253
|
-
| `DefaultAzureCredential`
|
|
254
|
-
| `ChainedTokenCredential`
|
|
255
|
-
| `EnvironmentCredential`
|
|
256
|
-
| `ManagedIdentityCredential` | Authenticates the managed identity of an Azure resource. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-in-azure-with-managed-identity) |
|
|
251
|
+
| Credential | Usage | Example |
|
|
252
|
+
| ----------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
|
253
|
+
| [`DefaultAzureCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/defaultazurecredential?view=azure-node-latest) | Provides a simplified authentication experience to quickly start developing applications run in the Azure cloud. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-with-defaultazurecredential) |
|
|
254
|
+
| [`ChainedTokenCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/chainedtokencredential?view=azure-node-latest) | Allows users to define custom authentication flows composing multiple credentials. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#chaining-credentials) |
|
|
255
|
+
| [`EnvironmentCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/environmentcredential?view=azure-node-latest) | Authenticates a service principal or user via credential information specified in environment variables. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-service-principal-with-environment-credentials) |
|
|
256
|
+
| [`ManagedIdentityCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/managedidentitycredential?view=azure-node-latest) | Authenticates the managed identity of an Azure resource. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-in-azure-with-managed-identity) |
|
|
257
257
|
|
|
258
258
|
### Authenticating Service Principals
|
|
259
259
|
|
|
260
|
-
|
|
|
261
|
-
|
|
|
262
|
-
| `
|
|
263
|
-
| `
|
|
260
|
+
| Credential | Usage | Example | Reference |
|
|
261
|
+
| --------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------- |
|
|
262
|
+
| [`ClientCertificateCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/clientcertificatecredential?view=azure-node-latest) | Authenticates a service principal using a certificate. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-service-principal-with-a-client-certificate) | [Service principal authentication](https://docs.microsoft.com/azure/active-directory/develop/app-objects-and-service-principals) |
|
|
263
|
+
| [`ClientSecretCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/clientsecretcredential?view=azure-node-latest) | Authenticates a service principal using a secret. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-service-principal-with-a-client-secret) | [Service principal authentication](https://docs.microsoft.com/azure/active-directory/develop/app-objects-and-service-principals) |
|
|
264
264
|
|
|
265
265
|
### Authenticating Users
|
|
266
266
|
|
|
267
|
-
|
|
|
268
|
-
|
|
|
269
|
-
| `
|
|
270
|
-
| `DeviceCodeCredential`
|
|
271
|
-
| `
|
|
272
|
-
| `
|
|
267
|
+
| Credential | Usage | Example | Reference |
|
|
268
|
+
| ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- |
|
|
269
|
+
| [`AuthorizationCodeCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/authorizationcodecredential?view=azure-node-latest) | Authenticates a user with a previously obtained authorization code. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-auth-code-flow) | [OAuth2 authentication code](https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-auth-code-flow) |
|
|
270
|
+
| [`DeviceCodeCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/devicecodecredential?view=azure-node-latest) | Interactively authenticates a user on devices with limited UI. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-device-code-flow) | [Device code authentication](https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-device-code) |
|
|
271
|
+
| [`InteractiveBrowserCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/interactivebrowsercredential?view=azure-node-latest) | Interactively authenticates a user with the default system browser. Read more about how this happens [here](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/interactive-browser-credential.md). | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-interactively-in-the-browser) | [OAuth2 authentication code](https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-auth-code-flow) |
|
|
272
|
+
| [`OnBehalfOfCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/onbehalfofcredential?view=azure-node-latest) | Propagates the delegated user identity and permissions through the request chain |
|
|
273
|
+
| [`UsernamePasswordCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/usernamepasswordcredential?view=azure-node-latest) | Authenticates a user with a username and password. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-username-and-password) | [Username + password authentication](https://docs.microsoft.com/azure/active-directory/develop/v2-oauth-ropc) |
|
|
273
274
|
|
|
274
275
|
### Authenticating via Development Tools
|
|
275
276
|
|
|
276
|
-
|
|
|
277
|
-
|
|
|
278
|
-
| `AzureCliCredential`
|
|
279
|
-
| `AzurePowerShellCredential` | Authenticate in a development environment using Azure PowerShell. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-azure-powershell) | [Azure PowerShell authentication](https://docs.microsoft.com/powershell/azure/authenticate-azureps) |
|
|
277
|
+
| Credential | Usage | Example | Reference |
|
|
278
|
+
| ----------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
|
|
279
|
+
| [`AzureCliCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/azureclicredential?view=azure-node-latest) | Authenticate in a development environment with the Azure CLI. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-azure-cli) | [Azure CLI authentication](https://docs.microsoft.com/cli/azure/authenticate-azure-cli) |
|
|
280
|
+
| [`AzurePowerShellCredential`](https://docs.microsoft.com/javascript/api/@azure/identity/azurepowershellcredential?view=azure-node-latest) | Authenticate in a development environment using Azure PowerShell. | [example](https://github.com/Azure/azure-sdk-for-js/blob/main/sdk/identity/identity/samples/AzureIdentityExamples.md#authenticating-a-user-account-with-azure-powershell) | [Azure PowerShell authentication](https://docs.microsoft.com/powershell/azure/authenticate-azureps) |
|
|
280
281
|
|
|
281
282
|
## Troubleshooting
|
|
282
283
|
|
|
@@ -289,7 +290,7 @@ Credentials raise `AuthenticationError` when they fail to authenticate. This cla
|
|
|
289
290
|
Enabling logging may help uncover useful information about failures.
|
|
290
291
|
|
|
291
292
|
To see a log of HTTP requests and responses, set the `AZURE_LOG_LEVEL` environment variable to `info`.
|
|
292
|
-
You can read this environment variable from the
|
|
293
|
+
You can read this environment variable from the _.env_ file by explicitly specifying a file path:
|
|
293
294
|
|
|
294
295
|
```javascript
|
|
295
296
|
require("dotenv").config({ path: ".env" });
|
|
@@ -302,7 +303,7 @@ import { setLogLevel } from "@azure/logger";
|
|
|
302
303
|
|
|
303
304
|
setLogLevel("info");
|
|
304
305
|
```
|
|
305
|
-
|
|
306
|
+
|
|
306
307
|
In cases where the authenticate code might be running in an environment with more than one credential available,
|
|
307
308
|
the `@azure/identity` package offers a unique form of logging. On the optional parameters for every credential,
|
|
308
309
|
developers can set `allowLoggingAccountIdentifiers` to true in the
|
|
@@ -318,7 +319,7 @@ import { setLogLevel } from "@azure/logger";
|
|
|
318
319
|
setLogLevel("info");
|
|
319
320
|
|
|
320
321
|
const credential = new DefaultAzureCredential({
|
|
321
|
-
loggingOptions: { allowLoggingAccountIdentifiers: true }
|
|
322
|
+
loggingOptions: { allowLoggingAccountIdentifiers: true },
|
|
322
323
|
});
|
|
323
324
|
```
|
|
324
325
|
|
|
@@ -328,7 +329,7 @@ Once that credential authenticates, the following message will appear in the log
|
|
|
328
329
|
azure:identity:info [Authenticated account] Client ID: HIDDEN. Tenant ID: HIDDEN. User Principal Name: HIDDEN. Object ID (user): HIDDEN
|
|
329
330
|
```
|
|
330
331
|
|
|
331
|
-
For assistance with troubleshooting, see the [troubleshooting guide](https://
|
|
332
|
+
For assistance with troubleshooting, see the [troubleshooting guide](https://aka.ms/azsdk/js/identity/troubleshoot).
|
|
332
333
|
|
|
333
334
|
## Next steps
|
|
334
335
|
|
package/dist/index.js
CHANGED
|
@@ -3243,7 +3243,8 @@ class MsalOpenBrowser extends MsalNode {
|
|
|
3243
3243
|
};
|
|
3244
3244
|
const response = await this.publicApp.getAuthCodeUrl(authCodeUrlParameters);
|
|
3245
3245
|
try {
|
|
3246
|
-
|
|
3246
|
+
// A new instance on macOS only which allows it to not hang, does not fix the issue on linux
|
|
3247
|
+
await interactiveBrowserMockable.open(response, { wait: true, newInstance: true });
|
|
3247
3248
|
}
|
|
3248
3249
|
catch (e) {
|
|
3249
3250
|
throw new CredentialUnavailableError(`InteractiveBrowserCredential: Could not open a browser window. Error: ${e.message}`);
|