fc61bb4848
* Added DefaultAzureCredential * Improved Llgging --------- Co-authored-by: Anton Kolesnyk <antkmsft@users.noreply.github.com>
73 lines
2.9 KiB
C++
73 lines
2.9 KiB
C++
// Copyright (c) Microsoft Corporation. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
#include "azure/identity/default_azure_credential.hpp"
|
|
|
|
#include "azure/identity/azure_cli_credential.hpp"
|
|
#include "azure/identity/environment_credential.hpp"
|
|
#include "azure/identity/managed_identity_credential.hpp"
|
|
|
|
#include "azure/core/internal/diagnostics/log.hpp"
|
|
|
|
using namespace Azure::Identity;
|
|
using namespace Azure::Core::Credentials;
|
|
|
|
using Azure::Core::Context;
|
|
using Azure::Core::Diagnostics::Logger;
|
|
using Azure::Core::Diagnostics::_internal::Log;
|
|
|
|
namespace {
|
|
std::string const IdentityPrefix = "Identity: ";
|
|
}
|
|
|
|
DefaultAzureCredential::DefaultAzureCredential(TokenCredentialOptions const& options)
|
|
{
|
|
// Initializing m_credential below and not in the member initializer list to have a specific order
|
|
// of log messages.
|
|
auto const logLevel = Logger::Level::Verbose;
|
|
if (Log::ShouldWrite(logLevel))
|
|
{
|
|
Log::Write(
|
|
logLevel,
|
|
IdentityPrefix
|
|
+ "Creating DefaultAzureCredential which combines mutiple parameterless credentials "
|
|
"into a single one (by using ChainedTokenCredential)."
|
|
"\nDefaultAzureCredential is only recommended for the early stages of development, "
|
|
"and not for usage in production environment."
|
|
"\nOnce the developer focuses on the Credentials and Authentication aspects of their "
|
|
"application, DefaultAzureCredential needs to be replaced with the credential that "
|
|
"is the better fit for the application.");
|
|
}
|
|
|
|
// Creating credentials in order to ensure the order of log messages.
|
|
auto const envCred = std::make_shared<EnvironmentCredential>(options);
|
|
auto const azCliCred = std::make_shared<AzureCliCredential>(options);
|
|
auto const managedIdentityCred = std::make_shared<ManagedIdentityCredential>(options);
|
|
|
|
// Using the ChainedTokenCredential's private constructor for more detailed log messages.
|
|
m_credentials.reset(new ChainedTokenCredential(
|
|
ChainedTokenCredential::Sources{envCred, azCliCred, managedIdentityCred},
|
|
"DefaultAzureCredential", // extra args for the ChainedTokenCredential's private constructor.
|
|
std::vector<std::string>{
|
|
"EnvironmentCredential", "AzureCliCredential", "ManagedIdentityCredential"}));
|
|
}
|
|
|
|
DefaultAzureCredential::~DefaultAzureCredential() = default;
|
|
|
|
AccessToken DefaultAzureCredential::GetToken(
|
|
TokenRequestContext const& tokenRequestContext,
|
|
Context const& context) const
|
|
{
|
|
try
|
|
{
|
|
return m_credentials->GetToken(tokenRequestContext, context);
|
|
}
|
|
catch (AuthenticationException const&)
|
|
{
|
|
throw AuthenticationException("Failed to get token from DefaultAzureCredential."
|
|
"\nSee Azure::Core::Diagnostics::Logger for details "
|
|
"(https://github.com/Azure/azure-sdk-for-cpp/tree/main/sdk/"
|
|
"identity/azure-identity#troubleshooting).");
|
|
}
|
|
}
|