无法从桌面控制台应用访问Azure Key Vault

3 回答

• 9

  Mark的博客非常有用，我从博客那里学会了如何去做，以下是截至2018年11月6日的步骤和代码 .

  步骤摘要：

  • 注册应用

  • 在这个新注册的App中创建Key

  • 创建密钥保管库并为应用分配权限

  • 在保险库内创建秘密

  通过代码访问它们

  using Microsoft.Azure.KeyVault;
  using Microsoft.IdentityModel.Clients.ActiveDirectory;
  using System;
  using System.Collections.Generic;
  using System.Linq;
  using System.Net.Http;
  using System.Text;
  using System.Threading.Tasks;
  
  namespace Experiments.AzureKeyValut
  {
      internal class AzureKeyValueDemo
      {
          private static async Task Main(string[] args)
          {
              await GetSecretAsync("https://YOURVAULTNAME.vault.azure.net/", "YourSecretKey");
          }
  
          private static async Task<string> GetSecretAsync(string vaultUrl, string vaultKey)
          {
              var client = new KeyVaultClient(new KeyVaultClient.AuthenticationCallback(GetAccessTokenAsync), new HttpClient());
              var secret = await client.GetSecretAsync(vaultUrl, vaultKey);
  
              return secret.Value;
          }
  
          private static async Task<string> GetAccessTokenAsync(string authority, string resource, string scope)
          {
              //DEMO ONLY
              //Storing ApplicationId and Key in code is bad idea :)
              var appCredentials = new ClientCredential("YourApplicationId", "YourApplicationKey");
              var context = new AuthenticationContext(authority, TokenCache.DefaultShared);
  
              var result = await context.AcquireTokenAsync(resource, appCredentials);
  
              return result.AccessToken;
          }
      }
  }
  

  How to register your app:

  

  How to create Azure App's password and get your App's Id

  

  How to create Azure Key Vault and Assign Permissions

  

  How to create Azure secrets

  

  How to access it thru code

  

  回复于 2024-05-01T03:52:23+08:00
• 4

  除了Tom提供的内容之外，在我最终想出如何让事情发挥作用后，我记录了我在https://jumpforjoysoftware.com/2017/12/azure-key-vaults/学到的东西 . 希望这将为人们带来一些严重的挫败感 .

  回复于 2024-05-01T03:52:23+08:00
• 2

  帮助或参考从控制台桌面应用程序访问密钥保险库的非常好的示例将不胜感激 .

  在我们注册Azure目录应用程序之后，我们需要assign role to application . 如果我们想要运行Azure Key Vault，我们还需要授予操作Key Vault的权限 . 密钥保管库的资源是 https://vault.azure.net . 您还可以从另一个SO thread获取更多详细信息 .

  演示代码：

  static string appId = "application Id";
   static string tenantId = "tenant id";
   static string uri = "http://localhost:13526"; //redirect uri
   static void Main(string[] args)
   {
      var kv = new KeyVaultClient(GetAccessToken);
      var scret = kv.GetSecretAsync("https://xxxx.vault.azure.net", "xxxx").GetAwaiter().GetResult();
   }
  
   public static async Task<string> GetAccessToken(string azureTenantId,string clientId,string redirectUri)
   {
         var context = new AuthenticationContext("https://login.windows.net/" + tenantId);
         var tokenResult = await context.AcquireTokenAsync("https://vault.azure.net", appId, new Uri(uri), new PlatformParameters(PromptBehavior.SelectAccount));
         return tokenResult.AccessToken;
    }
  

  回复于 2024-05-01T03:52:23+08:00