@azure/identity 3.0.0-alpha.20220809.2 → 3.0.0-alpha.20220914.2

package/dist/index.js

@@ -293,11 +293,15 @@ function credentialLoggerInstance(title, parent, log = logger$l) {
     function warning(message) {
         log.warning(`${fullTitle} =>`, message);
     }
+    function verbose(message) {
+        log.verbose(`${fullTitle} =>`, message);
+    }
     return {
         title,
         fullTitle,
         info,
         warning,
+        verbose,
     };
 }
 /**
@@ -2471,48 +2475,43 @@ const imdsMsi = {
             skipQuery: true,
         });
         return tracingClient.withSpan("ManagedIdentityCredential-pingImdsEndpoint", getTokenOptions, async (options) => {
-            var _a, _b;
+            var _a;
             requestOptions.tracingOptions = options.tracingOptions;
+            // Create a request with a timeout since we expect that
+            // not having a "Metadata" header should cause an error to be
+            // returned quickly from the endpoint, proving its availability.
+            const request = coreRestPipeline.createPipelineRequest(requestOptions);
+            // Default to 300 if the default of 0 is used.
+            // Negative values can still be used to disable the timeout.
+            request.timeout = ((_a = options.requestOptions) === null || _a === void 0 ? void 0 : _a.timeout) || 300;
+            // This MSI uses the imdsEndpoint to get the token, which only uses http://
+            request.allowInsecureConnection = true;
             try {
-                // Create a request with a timeout since we expect that
-                // not having a "Metadata" header should cause an error to be
-                // returned quickly from the endpoint, proving its availability.
-                const request = coreRestPipeline.createPipelineRequest(requestOptions);
-                request.timeout = (_b = (_a = options.requestOptions) === null || _a === void 0 ? void 0 : _a.timeout) !== null && _b !== void 0 ? _b : 300;
-                // This MSI uses the imdsEndpoint to get the token, which only uses http://
-                request.allowInsecureConnection = true;
-                try {
-                    logger$a.info(`${msiName$4}: Pinging the Azure IMDS endpoint`);
-                    await identityClient.sendRequest(request);
-                }
-                catch (err) {
-                    if ((err.name === "RestError" && err.code === coreRestPipeline.RestError.REQUEST_SEND_ERROR) ||
-                        err.name === "AbortError" ||
-                        err.code === "ENETUNREACH" || // Network unreachable
-                        err.code === "ECONNREFUSED" || // connection refused
-                        err.code === "EHOSTDOWN" // host is down
-                    ) {
-                        // If the request failed, or Node.js was unable to establish a connection,
-                        // or the host was down, we'll assume the IMDS endpoint isn't available.
-                        logger$a.info(`${msiName$4}: The Azure IMDS endpoint is unavailable`);
-                        return false;
-                    }
-                }
-                // If we received any response, the endpoint is available
-                logger$a.info(`${msiName$4}: The Azure IMDS endpoint is available`);
-                return true;
+                logger$a.info(`${msiName$4}: Pinging the Azure IMDS endpoint`);
+                await identityClient.sendRequest(request);
             }
             catch (err) {
-                // createWebResource failed.
-                // This error should bubble up to the user.
-                logger$a.info(`${msiName$4}: Error when creating the WebResource for the Azure IMDS endpoint: ${err.message}`);
-                throw err;
+                // If the request failed, or Node.js was unable to establish a connection,
+                // or the host was down, we'll assume the IMDS endpoint isn't available.
+                if (coreUtil.isError(err)) {
+                    logger$a.verbose(`${msiName$4}: Caught error ${err.name}: ${err.message}`);
+                }
+                logger$a.info(`${msiName$4}: The Azure IMDS endpoint is unavailable`);
+                return false;
             }
+            // If we received any response, the endpoint is available
+            logger$a.info(`${msiName$4}: The Azure IMDS endpoint is available`);
+            return true;
         });
     },
     async getToken(configuration, getTokenOptions = {}) {
         const { identityClient, scopes, clientId, resourceId } = configuration;
-        logger$a.info(`${msiName$4}: Using the Azure IMDS endpoint coming from the environment variable MSI_ENDPOINT=${process.env.MSI_ENDPOINT}, and using the cloud shell to proceed with the authentication.`);
+        if (process.env.AZURE_POD_IDENTITY_AUTHORITY_HOST) {
+            logger$a.info(`${msiName$4}: Using the Azure IMDS endpoint coming from the environment variable AZURE_POD_IDENTITY_AUTHORITY_HOST=${process.env.AZURE_POD_IDENTITY_AUTHORITY_HOST}.`);
+        }
+        else {
+            logger$a.info(`${msiName$4}: Using the default Azure IMDS endpoint ${imdsHost}.`);
+        }
         let nextDelayInMs = imdsMsiRetryConfig.startDelayInMs;
         for (let retries = 0; retries < imdsMsiRetryConfig.maxRetries; retries++) {
             try {