- Updated readme with a pointer to a migration guide to use @azure/identity instead of @azure/ms-rest-nodeauth if you are trying to authenticate requests from packages targetting the Azure Resource Manager. Such packages have their names starting with
@azure/arm-. As of December 2021, new major versions of all such packages will drop support for credentials from@azure/ms-rest-nodeauth. - Updated readme with list of Azure packages that supports credentials from
@azure/ms-rest-nodeauth. - Updated readme with a note that there is no active development for
@azure/ms-rest-nodeauthother than critical bug fixes.
- Use stronger types in places where AuthResponse was used in return values that used the abstract base class
TokenCredentialsBase. See PR 121 for details. - Fix reference docs for return types in exported APIs. See PR 133
- Add a note in the readme regarding the known issue with proxy. See PR 131
- Updated the dependency
adal-nodeto version^0.2.0. This fixes customer issue: 125.
- Pass user provided
tokenCacheoption towithUsernamePasswordWithAuthResponseandwithServicePrincipalSecretWithAuthResponsemethods to the credentials being created. - Fix issue with
AzureCliCredentialswhere theazcommand fails due to spaces in the argument list passed toexecFile. This regression got introduced in the previous update.
- Fix command injection in core function
execAz()by replacingexec()withexecFile()- CVE-2021-28458
- Updated doc comments on all exported members to follow TSDoc for better API reference documentation.
- Fixed a bug where
buildTenantsListwill throw an error when it can't list tenants - Added instructions for authenticating with an existing token
- The helper method
buildTenantListis made public. This is helpful if one needs to get the Ids of all the tenants in the account programmatically. - A new method
setDomain()which takes the Id of a tenant is now available on all credentials. Use this to change the domain i.e. the tenant against which tokens are created. - Fixed typos in error messages.
- Added support for passing a
clientIdproperty in theoptionsparameter of the MSI based login methodloginWithAppServiceMSI(). This is required to allow user-assigned managed identities to be used to authenticate through Azure App Services and Azure Functions. - Added support for the
IDENTITY_ENDPOINTandIDENTITY_SECRETwhen using theMSIAppServiceTokenCredentialscredentials.
- Through a mistake of release automation, a CI job from PR #91 got shipped by accident.
- Fixed a bug where the callback to
loginWithServicePrincipalSecretWithAuthResponseis sometimes not called. For more details, see PR 77
- Fix bug prevent tenant IDs from being discovered on auth
- Reduce number of
Promiseobject allocations insideasyncfunctions.
- Breaking change:
- Updated min version of dependency
@azure/ms-rest-jsfrom^1.8.13to^2.0.4there by fixing #67.
- Updated min version of dependency
- Fixed a bug where
buildTenantsListwill throw an error when it can't list tenants - Added instructions for authenticating with an existing token
- Fixed a bug where the callback to
loginWithServicePrincipalSecretWithAuthResponseis sometimes not called. - Fix bug prevent tenant IDs from being discovered on auth
- Reduce number of
Promiseobject allocations insideasyncfunctions.
- Rolled back the min version of dependency
@azure/ms-rest-jsfrom^2.0.3to^1.8.13thereby fixing #69.
- Updated min version of dependency
@azure/ms-rest-jsto^2.0.3. - Updated min version of dependency
@azure/ms-rest-azure-envto^2.0.0. - Improved documentation of
MSIOptions.resource - Improved samples in README.md
- Ensure we always get JSON responses back from Azure CLI.
- Get subscriptions while authenticating only if the token audience is for Azure Resource Manager.
- Added support for client_id, object_id and ms_res_id query parameters for VmMSI. Fixes #58.
- Breaking change:
- Added support to get token for a different resource like Azure Keyvault, Azure Batch, Azure Graph apart from the default Azure Resource Manager resource via
AzureCliCredentials. AzureCliCredentials.create()now takes an optional parameter where the user can specify the subscriptionId and the resource for which the token is required.AzureCliCredentials.getDefaultSubscription()has been changed toAzureCliCredentials.getSubscription(subscriptionIdOrName?: string).
- Added support to get token for a different resource like Azure Keyvault, Azure Batch, Azure Graph apart from the default Azure Resource Manager resource via
- Minor updates
- Added support to get credentials from
Azure CLI, provided the user is already logged in via CLI. These credentials can be used by the SDK to make requests to Azure. Fixes, - azure-sdk-for-js/issues/2810
- azure-sdk-for-node/issues/2284.
- Update README.md
- Fix repository url in package.json
- Added support for ServicePrincipal login with certificates.
- Updated dependencies to their latest versions.
- Updated
@azure/ms-rest-jsto the latest version^1.8.1.
- Updated the return types for calls using interactive login, user name/ password and service principal to return the right types with promise flavor methods.
- Fixed issues in AppService MSI login.
- Improved documentation of
MSIAppServiceTokenCredentials.getToken()
- Added support for custom MSI endpoint.
- Exported MSI login methods from the package.
- Added a check for verifying the package.json version
- Added azure pipelines for CI.
- Fixed incorrect path in the "main" node of package.json.
- Added owners and issue template.
- Improved internal structure of the package.
- Renamed package to "@azure/ms-rest-nodeauth"
- Move KeyVaultCredentials into KeyVault SDK project
- Add KeyVaultFactory which helps creating authentication method from various credential types.
- Updated documentation
- Added KeyVaultCredentials
- Added TopicCredentials
- Added support for MSI authentication
- Updated ms-rest-js package to 0.19 version
- Updated ms-rest-azure-env package to 0.1.1 version
- Updated ms-rest-js package to 0.18 version
- Updated ms-rest-js package to 0.17 version
- Updated ms-rest-js package to 0.14 version
- Domain is no longer a required parameter for MSITokenCredentials.
- Rename LoginWithMSIOptions interface to MSIOptions
- Initial version of ms-rest-nodeauth
- Provides following flavors of authentication in different Azure Clouds
- Authentication via service principal
- Authentication via username/password
- Interactive authentication (device code flow)
- Authentication via auth file
- MSI (Managed Service Identity) based authentication from a virtual machine created in Azure.