Comments (4)
I believe this functionality exists now, would you be happy to close this issue or did I perhaps miss something? Thanks!
from hamilton.
Hi @simongottschlag, thanks for requesting!
I've just merged a refactor of the auth package which exports the underlying authorizers for the client credentials flow.
Whilst the helper functions auth.NewClientSecretAuthorizer()
and auth.NewClientCertificateAuthorizer()
necessarily accept an auth.Api
to determine the scopes to request, you should now be able implement these yourself if you want to request scopes for your own application.
I believe something like this should work:
var (
myAppIdUri = "https://app.myorg.net"
clientId = "00000000-0000-0000-0000-000000000000"
clientSecret = "qwertyuiop"
tenantId = "00000000-0000-0000-0000-000000000000"
)
conf := ClientCredentialsConfig{
ClientID: clientId,
ClientSecret: clientSecret,
Scopes: []string{fmt.Sprintf("%s/%s", myAppIdUri, ".default")},
TokenURL: auth.TokenEndpoint(environments.Global.AzureADEndpoint, tenantId, auth.TokenVersion2),
}
authorizer := conf.TokenSource(ctx, ClientCredentialsSecretType)
Let me know if this works :)
from hamilton.
Hi @manicminer!
Thank you so much!
Would this work with Azure CLI and MSI auth as well?
Right now, I'm providing all three as options :)
from hamilton.
@simongottschlag Sorry for the delay in replying, I missed your question! You likely worked this out already, but yes it will sort of work for MSI auth (which issues a v1 token, so you should provide a resource URL rather than a scope).
The Azure CLI, wraps the token functionality in the commandline argument --resource-type
that only supports a limited set of values (see az account get-access-token --help
), of which Hamilton only exposes the ms-graph
and aad-graph
options at this time.
So... there's some flexibility in these but providing proper v2 token scopes only works with ClientCredentials auth.
from hamilton.
Related Issues (20)
- Support Synapse in USGovernmentCloud
- Support OData query on appRoleAssignments list
- Consider using beta version of API for accessPackage HOT 1
- azcli auth doesn't support MSAL scopes HOT 1
- Support for Continuous Access Evaluation (CAE) in conditional access session
- Support for Chat Resource HOT 2
- Group writebackConfiguration HOT 2
- Add the app ID for Azure Database for PostgreSQL - Flexible Server.
- Is it possible to fetch synchronizationSchema?
- ProvisionOnDemand() in SynchronizationJobClient returns error even though provisioning was successful
- AdministrativeUnits client uses wrong endpoint
- Replace double forward slash with single forward slash in all requests HOT 1
- How to manage enterprise application service principal saml claims? HOT 4
- Add support for synchronization GetSchema
- Add ServiceManagementReference to model
- Add support for ClientApplications in ConditionalAccessConditionSet
- DEBUG log entry showing up in production.
- Can "encoding/json" be replaced? HOT 1
- Add support for conditional access policy guestsOrExternalUsers settings
- [Question] Dynamic Distribution Lists and mailbox custom attributes HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from hamilton.