50 lines
2.9 KiB
JavaScript
50 lines
2.9 KiB
JavaScript
|
/*! @azure/msal-node v2.13.1 2024-08-29 */
|
||
|
|
'use strict';
|
||
|
|
import { ManagedIdentityRequestParameters } from '../../config/ManagedIdentityRequestParameters.mjs';
|
||
|
|
import { BaseManagedIdentitySource } from './BaseManagedIdentitySource.mjs';
|
||
|
|
import { ManagedIdentityEnvironmentVariableNames, ManagedIdentitySourceNames, ManagedIdentityIdType, METADATA_HEADER_NAME, RESOURCE_BODY_OR_QUERY_PARAMETER_NAME, HttpMethod } from '../../utils/Constants.mjs';
|
||
|
|
import { createManagedIdentityError } from '../../error/ManagedIdentityError.mjs';
|
||
|
|
import { unableToCreateCloudShell } from '../../error/ManagedIdentityErrorCodes.mjs';
|
||
|
|
|
||
|
|
/*
|
||
|
|
* Copyright (c) Microsoft Corporation. All rights reserved.
|
||
|
|
* Licensed under the MIT License.
|
||
|
|
*/
|
||
|
|
/**
|
||
|
|
* Original source of code: https://github.com/Azure/azure-sdk-for-net/blob/main/sdk/identity/Azure.Identity/src/CloudShellManagedIdentitySource.cs
|
||
|
|
*/
|
||
|
|
class CloudShell extends BaseManagedIdentitySource {
|
||
|
|
constructor(logger, nodeStorage, networkClient, cryptoProvider, msiEndpoint) {
|
||
|
|
super(logger, nodeStorage, networkClient, cryptoProvider);
|
||
|
|
this.msiEndpoint = msiEndpoint;
|
||
|
|
}
|
||
|
|
static getEnvironmentVariables() {
|
||
|
|
const msiEndpoint = process.env[ManagedIdentityEnvironmentVariableNames.MSI_ENDPOINT];
|
||
|
|
return [msiEndpoint];
|
||
|
|
}
|
||
|
|
static tryCreate(logger, nodeStorage, networkClient, cryptoProvider, managedIdentityId) {
|
||
|
|
const [msiEndpoint] = CloudShell.getEnvironmentVariables();
|
||
|
|
// if the msi endpoint environment variable is undefined, this MSI provider is unavailable.
|
||
|
|
if (!msiEndpoint) {
|
||
|
|
logger.info(`[Managed Identity] ${ManagedIdentitySourceNames.CLOUD_SHELL} managed identity is unavailable because the '${ManagedIdentityEnvironmentVariableNames.MSI_ENDPOINT} environment variable is not defined.`);
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
const validatedMsiEndpoint = CloudShell.getValidatedEnvVariableUrlString(ManagedIdentityEnvironmentVariableNames.MSI_ENDPOINT, msiEndpoint, ManagedIdentitySourceNames.CLOUD_SHELL, logger);
|
||
|
|
logger.info(`[Managed Identity] Environment variable validation passed for ${ManagedIdentitySourceNames.CLOUD_SHELL} managed identity. Endpoint URI: ${validatedMsiEndpoint}. Creating ${ManagedIdentitySourceNames.CLOUD_SHELL} managed identity.`);
|
||
|
|
if (managedIdentityId.idType !== ManagedIdentityIdType.SYSTEM_ASSIGNED) {
|
||
|
|
throw createManagedIdentityError(unableToCreateCloudShell);
|
||
|
|
}
|
||
|
|
return new CloudShell(logger, nodeStorage, networkClient, cryptoProvider, msiEndpoint);
|
||
|
|
}
|
||
|
|
createRequest(resource) {
|
||
|
|
const request = new ManagedIdentityRequestParameters(HttpMethod.POST, this.msiEndpoint);
|
||
|
|
request.headers[METADATA_HEADER_NAME] = "true";
|
||
|
|
request.bodyParameters[RESOURCE_BODY_OR_QUERY_PARAMETER_NAME] =
|
||
|
|
resource;
|
||
|
|
return request;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
export { CloudShell };
|
||
|
|
//# sourceMappingURL=CloudShell.mjs.map
|