@azure/ms-rest-nodeauth
Version:
Azure Authentication library in node.js with type definitions.
108 lines • 5.55 kB
JavaScript
;
// Copyright (c) Microsoft Corporation. All rights reserved.
// Licensed under the MIT License. See License.txt in the project root for license information.
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : new P(function (resolve) { resolve(result.value); }).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
Object.defineProperty(exports, "__esModule", { value: true });
const ms_rest_js_1 = require("@azure/ms-rest-js");
const authConstants_1 = require("../util/authConstants");
/**
* Provides information about managed service identity token credentials.
* This object can only be used to acquire token on a virtual machine provisioned in Azure with managed service identity.
*/
class MSITokenCredentials {
/**
* Creates an instance of MSITokenCredentials.
* @param options - Optional parameters
* @param options.resource - The resource uri or token audience for which the token is needed.
* For e.g. it can be:
* - resource management endpoint "https://management.azure.com/"(default)
* - management endpoint "https://management.core.windows.net/"
*/
constructor(options) {
if (!options)
options = {};
if (!options.resource) {
options.resource = authConstants_1.AuthConstants.RESOURCE_MANAGER_ENDPOINT;
}
else if (typeof options.resource.valueOf() !== "string") {
throw new Error("resource must be a uri.");
}
this.resource = options.resource;
this._httpClient = options.httpClient || new ms_rest_js_1.DefaultHttpClient();
}
/**
* Parses a tokenResponse json string into a object, and converts properties on the first level to camelCase.
* This method tries to standardize the tokenResponse
* @param body - A json string
* @returns The tokenResponse (tokenType and accessToken are the two important properties).
*/
parseTokenResponse(body) {
// Docs show different examples of possible MSI responses for different services. https://docs.microsoft.com/en-us/azure/active-directory/managed-service-identity/overview
// expires_on - is a Date like string in this doc
// - https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity#rest-protocol-examples
// In other doc it is stringified number.
// - https://docs.microsoft.com/en-us/azure/active-directory/managed-service-identity/tutorial-linux-vm-access-arm#get-an-access-token-using-the-vms-identity-and-use-it-to-call-resource-manager
const parsedBody = JSON.parse(body);
parsedBody.accessToken = parsedBody["access_token"];
delete parsedBody["access_token"];
parsedBody.tokenType = parsedBody["token_type"];
delete parsedBody["token_type"];
if (parsedBody["refresh_token"]) {
parsedBody.refreshToken = parsedBody["refresh_token"];
delete parsedBody["refresh_token"];
}
if (parsedBody["expires_in"]) {
parsedBody.expiresIn = parsedBody["expires_in"];
if (typeof parsedBody["expires_in"] === "string") {
// normal number as a string '1504130527'
parsedBody.expiresIn = parseInt(parsedBody["expires_in"], 10);
}
delete parsedBody["expires_in"];
}
if (parsedBody["not_before"]) {
parsedBody.notBefore = parsedBody["not_before"];
if (typeof parsedBody["not_before"] === "string") {
// normal number as a string '1504130527'
parsedBody.notBefore = parseInt(parsedBody["not_before"], 10);
}
delete parsedBody["not_before"];
}
if (parsedBody["expires_on"]) {
parsedBody.expiresOn = parsedBody["expires_on"];
if (typeof parsedBody["expires_on"] === "string") {
// possibly a Date string '09/14/2017 00:00:00 PM +00:00'
if (parsedBody["expires_on"].includes(":") || parsedBody["expires_on"].includes("/")) {
parsedBody.expiresOn = new Date(parseInt(parsedBody["expires_on"], 10));
}
else {
// normal number as a string '1504130527'
parsedBody.expiresOn = new Date(parseInt(parsedBody["expires_on"], 10));
}
}
delete parsedBody["expires_on"];
}
return parsedBody;
}
/**
* Signs a request with the Authentication header.
*
* @param webResource - The WebResource to be signed.
* @returns Promise with signed WebResource.
*/
signRequest(webResource) {
return __awaiter(this, void 0, void 0, function* () {
const tokenResponse = yield this.getToken();
webResource.headers.set(ms_rest_js_1.Constants.HeaderConstants.AUTHORIZATION, `${tokenResponse.tokenType} ${tokenResponse.accessToken}`);
return webResource;
});
}
}
exports.MSITokenCredentials = MSITokenCredentials;
//# sourceMappingURL=msiTokenCredentials.js.map