azure - 是否可以在 Azure 函数和 Azure Web API 之间启用托管标识?
问题描述
我目前正在使用和Basic
之间的身份验证。这并不安全,因此我正在寻找替代方案并在 Azure 中找到了该功能。但是,我看不到可以在 Web API 和 Azure 功能之间启用此功能。Azure Function
Web API
managed identity
注意:我们可以在 Web API 和 azure 函数之间启用Azure Function
,但不能在两者之间启用。KeyVault
寻找如下解决方案
解决方案
所以我们需要为这个资源获取一个访问令牌来调用 API,只需尝试下面的代码(我假设你已经为你的函数启用了托管身份):
#r "Newtonsoft.Json"
using System.Net;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Primitives;
using Newtonsoft.Json;
public static async Task<IActionResult> Run(HttpRequest req, ILogger log)
{
log.LogInformation("C# HTTP trigger function processed a request.");
var endpoint = Environment.GetEnvironmentVariable("IDENTITY_ENDPOINT");
var identity_header = Environment.GetEnvironmentVariable("IDENTITY_HEADER");
//chnage your client ID value here.
var resource = "4df52c7e-3d6f-4865-a499-cebbb2f79d26";
var requestURL = endpoint + "?resource=" + resource + "&api-version=2019-08-01";
HttpClient httpClient = new HttpClient();
httpClient.DefaultRequestHeaders.Add("X-IDENTITY-HEADER", identity_header);
HttpResponseMessage response = await httpClient.GetAsync(requestURL);
response.EnsureSuccessStatusCode();
string responseBody = await response.Content.ReadAsStringAsync();
var access_token = JsonConvert.DeserializeObject<TokenResp>(responseBody).access_token;
//After get access token for app: 4df52c7e-3d6f-4865-a499-cebbb2f79d26, call the API that protected by it
//chnage your api url here.
var APIURL = "https://frankapp.azurewebsites.net";
HttpClient callAPI = new HttpClient();
callAPI.DefaultRequestHeaders.Add("Authorization","Bearer "+ access_token);
HttpResponseMessage APIResponse = await callAPI.GetAsync(APIURL);
//check the response code to see if called the API successfully.
return new OkObjectResult(APIResponse.StatusCode);
}
public class TokenResp {
public string access_token { get; set; }
public string expires_on { get; set; }
public string resource { get; set; }
public string token_type { get; set; }
public string client_id { get; set; }
}
结果:
推荐阅读
- ssh - ssh 会话中的 sh 脚本不返回值
- node.js - 使用 Axios 从 React 向 mongodb 发送请求
- java - 从 Java 中的 tflite 模型推断
- reactjs - reactstrap 和 react-bootstrap 有什么区别?
- reactjs - 未找到反应下拉输入模块:错误
- ios - Collection View 中的 UIKit Dynamics 总是以混乱结束
- bash - Phrase similar filenames as a string with separated by coma and different filenames by whitespace
- c++ - 如何将派生类型的容器传递给需要基类型容器的函数
- java - IDEA - 导入maven项目后,看不到源代码
- php - 如何将输入值从 PHP 传递给 Python 文件?