- Updated readme with a pointer to a migration guide to use @azure/identity instead of @azure/ms-rest-nodeauth if you are trying to authenticate requests from packages targetting the Azure Resource Manager. Such packages have their names starting with
@azure/arm-
. As of December 2021, new major versions of all such packages will drop support for credentials from@azure/ms-rest-nodeauth
. - Updated readme with list of Azure packages that supports credentials from
@azure/ms-rest-nodeauth
. - Updated readme with a note that there is no active development for
@azure/ms-rest-nodeauth
other than critical bug fixes.
- Use stronger types in places where AuthResponse was used in return values that used the abstract base class
TokenCredentialsBase
. See PR 121 for details. - Fix reference docs for return types in exported APIs. See PR 133
- Add a note in the readme regarding the known issue with proxy. See PR 131
- Updated the dependency
adal-node
to version^0.2.0
. This fixes customer issue: 125.
- Pass user provided
tokenCache
option towithUsernamePasswordWithAuthResponse
andwithServicePrincipalSecretWithAuthResponse
methods to the credentials being created. - Fix issue with
AzureCliCredentials
where theaz
command fails due to spaces in the argument list passed toexecFile
. This regression got introduced in the previous update.
- Fix command injection in core function
execAz()
by replacingexec()
withexecFile()
- CVE-2021-28458
- Updated doc comments on all exported members to follow TSDoc for better API reference documentation.
- Fixed a bug where
buildTenantsList
will throw an error when it can't list tenants - Added instructions for authenticating with an existing token
- The helper method
buildTenantList
is made public. This is helpful if one needs to get the Ids of all the tenants in the account programmatically. - A new method
setDomain()
which takes the Id of a tenant is now available on all credentials. Use this to change the domain i.e. the tenant against which tokens are created. - Fixed typos in error messages.
- Added support for passing a
clientId
property in theoptions
parameter of the MSI based login methodloginWithAppServiceMSI()
. This is required to allow user-assigned managed identities to be used to authenticate through Azure App Services and Azure Functions. - Added support for the
IDENTITY_ENDPOINT
andIDENTITY_SECRET
when using theMSIAppServiceTokenCredentials
credentials.
- Through a mistake of release automation, a CI job from PR #91 got shipped by accident.
- Fixed a bug where the callback to
loginWithServicePrincipalSecretWithAuthResponse
is sometimes not called. For more details, see PR 77
- Fix bug prevent tenant IDs from being discovered on auth
- Reduce number of
Promise
object allocations insideasync
functions.
- Breaking change:
- Updated min version of dependency
@azure/ms-rest-js
from^1.8.13
to^2.0.4
there by fixing #67.
- Updated min version of dependency
- Fixed a bug where
buildTenantsList
will throw an error when it can't list tenants - Added instructions for authenticating with an existing token
- Fixed a bug where the callback to
loginWithServicePrincipalSecretWithAuthResponse
is sometimes not called. - Fix bug prevent tenant IDs from being discovered on auth
- Reduce number of
Promise
object allocations insideasync
functions.
- Rolled back the min version of dependency
@azure/ms-rest-js
from^2.0.3
to^1.8.13
thereby fixing #69.
- Updated min version of dependency
@azure/ms-rest-js
to^2.0.3
. - Updated min version of dependency
@azure/ms-rest-azure-env
to^2.0.0
. - Improved documentation of
MSIOptions.resource
- Improved samples in README.md
- Ensure we always get JSON responses back from Azure CLI.
- Get subscriptions while authenticating only if the token audience is for Azure Resource Manager.
- Added support for client_id, object_id and ms_res_id query parameters for VmMSI. Fixes #58.
- Breaking change:
- Added support to get token for a different resource like Azure Keyvault, Azure Batch, Azure Graph apart from the default Azure Resource Manager resource via
AzureCliCredentials
. AzureCliCredentials.create()
now takes an optional parameter where the user can specify the subscriptionId and the resource for which the token is required.AzureCliCredentials.getDefaultSubscription()
has been changed toAzureCliCredentials.getSubscription(subscriptionIdOrName?: string)
.
- Added support to get token for a different resource like Azure Keyvault, Azure Batch, Azure Graph apart from the default Azure Resource Manager resource via
- Minor updates
- Added support to get credentials from
Azure CLI
, provided the user is already logged in via CLI. These credentials can be used by the SDK to make requests to Azure. Fixes, - azure-sdk-for-js/issues/2810
- azure-sdk-for-node/issues/2284.
- Update README.md
- Fix repository url in package.json
- Added support for ServicePrincipal login with certificates.
- Updated dependencies to their latest versions.
- Updated
@azure/ms-rest-js
to the latest version^1.8.1
.
- Updated the return types for calls using interactive login, user name/ password and service principal to return the right types with promise flavor methods.
- Fixed issues in AppService MSI login.
- Improved documentation of
MSIAppServiceTokenCredentials.getToken()
- Added support for custom MSI endpoint.
- Exported MSI login methods from the package.
- Added a check for verifying the package.json version
- Added azure pipelines for CI.
- Fixed incorrect path in the "main" node of package.json.
- Added owners and issue template.
- Improved internal structure of the package.
- Renamed package to "@azure/ms-rest-nodeauth"
- Move KeyVaultCredentials into KeyVault SDK project
- Add KeyVaultFactory which helps creating authentication method from various credential types.
- Updated documentation
- Added KeyVaultCredentials
- Added TopicCredentials
- Added support for MSI authentication
- Updated ms-rest-js package to 0.19 version
- Updated ms-rest-azure-env package to 0.1.1 version
- Updated ms-rest-js package to 0.18 version
- Updated ms-rest-js package to 0.17 version
- Updated ms-rest-js package to 0.14 version
- Domain is no longer a required parameter for MSITokenCredentials.
- Rename LoginWithMSIOptions interface to MSIOptions
- Initial version of ms-rest-nodeauth
- Provides following flavors of authentication in different Azure Clouds
- Authentication via service principal
- Authentication via username/password
- Interactive authentication (device code flow)
- Authentication via auth file
- MSI (Managed Service Identity) based authentication from a virtual machine created in Azure.