Erro ao fazer o deploy com o Azure/Github

[rubemputtini]

Olá!

Estou com uma certa dificuldade ao fazer o deploy do meu projeto com o Azure, já configurei todas as variáveis secretas no Azure e GitHub, mas não quero expor minhas credenciais no appsettings como foi feito no curso. Já tentei de várias formas alterar o código com diferentes alternativas para o connection string no appsettings que vai público, mas todas sem sucesso.

O projeto está funcionando localmente, testei a mesma connection string no Azure Data Studio para conectar e foi possível.

Estou preso nessa situação em que o workflow não consegue avançar e meu projeto com as migrations não sobe em produção.

O que posso estar fazendo errado e como corrigir isso?

Obrigado.

Projeto: https://github.com/rubemputtini/minha-academia-tem

Vou deixar abaixo os arquivos de workflow, appsettings e o erro:

`
name: Build and deploy ASP.Net Core app to Azure Web App - minhaacademiatem

on:
push:
branches:
- main
workflow_dispatch:

jobs:
build:
runs-on: ubuntu-latest

steps:
  - uses: actions/checkout@v4

  - name: Set up .NET Core
    uses: actions/setup-dotnet@v4
    with:
      dotnet-version: '8.x'
  
  - name: Azure Login
    uses: azure/login@v1
    with:
      creds: ${{ secrets.AZURE_CREDENTIALS }}

  - name: Get Current IP Address
    id: ip
    uses: haythem/public-ip@v1.2

  - name: Add IP address to SQL Server
    run: az sql server firewall-rule create --resource-group minha-academia-tem --server minhaacademiatem --name ghactions --start-ip-address ${{ steps.ip.outputs.ipv4 }} --end-ip-address ${{ steps.ip.outputs.ipv4 }}
  
  - name: Install EF Tools
    run: dotnet tool install --global dotnet-ef

  - name: Build with dotnet
    run: dotnet build --configuration Release
  
  - name: Update database
    run: dotnet ef database update --project ./MinhaAcademiaTem/MinhaAcademiaTem.csproj
    env:
      ConnectionStrings__DefaultConnection: ${{ secrets.AZURE_SQL_CONNECTION_STRING }}
      StorageConnectionString: ${{ secrets.StorageConnectionString }}
      AdminSettings__AdminEmail: ${{ secrets.AdminSettings__AdminEmail }}
      JwtKey: ${{ secrets.JwtKey }}
      Smtp__Host: ${{ secrets.Smtp__Host }}
      Smtp__Port: ${{ secrets.Smtp__Port }}
      Smtp__UserName: ${{ secrets.Smtp__UserName }}
      Smtp__Password: ${{ secrets.Smtp__Password }}

  - name: dotnet publish
    run: dotnet publish -c Release -o ${{env.DOTNET_ROOT}}/myapp

  - name: Upload artifact for deployment job
    uses: actions/upload-artifact@v4
    with:
      name: .net-app
      path: ${{env.DOTNET_ROOT}}/myapp

deploy:
runs-on: ubuntu-latest
needs: build
environment:
name: 'Production'
url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
permissions:
id-token: write #This is required for requesting the JWT

steps:
  - name: Download artifact from build job
    uses: actions/download-artifact@v4
    with:
      name: .net-app
  
  - name: Login to Azure
    uses: azure/login@v2
    with:
      client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_74FB58242C4F4CF68E4E99366A921BFB }}
      tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_D70E7898434748F9908475195D5CD572 }}
      subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_0F616208FDB34A308D629576261A31B2 }}
      
  - name: Deploy to Azure Web App
    id: deploy-to-webapp
    uses: azure/webapps-deploy@v3
    with:
      app-name: 'minhaacademiatem'
      slot-name: 'Production'
      package: .
      `
      
      `{

"ConnectionStrings": {
"DefaultConnection": "Server=tcp:minhaacademiatem.database.windows.net,1433;Initial Catalog=minhaacademiatem;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;Authentication=Active Directory Default;"
},
"StorageConnectionString": "",
"Logging": {
"LogLevel": {
"Default": "Information",
"Microsoft.AspNetCore": "Warning"
}
},
"AdminSettings": {
"AdminEmail": ""
},
"JwtKey": "",
"Smtp": {
"Host": "",
"Port": "",
"UserName": "",
"Password": ""
},
"AllowedHosts": "*"
}
`

Run dotnet ef database update --project ./MinhaAcademiaTem/MinhaAcademiaTem.csproj dotnet ef database update --project ./MinhaAcademiaTem/MinhaAcademiaTem.csproj shell: /usr/bin/bash -e ***0*** env: DOTNET_ROOT: /usr/share/dotnet ConnectionStrings__DefaultConnection: *** StorageConnectionString: *** AdminSettings__AdminEmail: *** JwtKey: *** Smtp__Host: *** Smtp__Port: *** Smtp__UserName: *** Smtp__Password: *** Build started... Build succeeded. Microsoft.Data.SqlClient.SqlException (0x80131904): Login failed for user '<token-identified principal>'. The server is not currently configured to accept this token. at Microsoft.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action1 wrapCloseInAction)
at Microsoft.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
at Microsoft.Data.SqlClient.TdsParser.TryRun(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj, Boolean& dataReady)
at Microsoft.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
at Microsoft.Data.SqlClient.SqlInternalConnectionTds.CompleteLogin(Boolean enlistOK)
at Microsoft.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean ignoreSniOpenTimeout, TimeoutTimer timeout, Boolean withFailover)
at Microsoft.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString connectionOptions, SqlCredential credential, TimeoutTimer timeout)
at Microsoft.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(TimeoutTimer timeout, SqlConnectionString connectionOptions, SqlCredential credential, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance)
at Microsoft.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString userConnectionOptions, SessionData reconnectSessionData, Boolean applyTransientFaultHandling, String accessToken, DbConnectionPool pool)
at Microsoft.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
at Microsoft.Data.ProviderBase.DbConnectionFactory.CreatePooledConnection(DbConnectionPool pool, DbConnection owningObject, DbConnectionOptions options, DbConnectionPoolKey poolKey, DbConnectionOptions userOptions)
at Microsoft.Data.ProviderBase.DbConnectionPool.CreateObject(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at Microsoft.Data.ProviderBase.DbConnectionPool.UserCreateRequest(DbConnection owningObject, DbConnectionOptions userOptions, DbConnectionInternal oldConnection)
at Microsoft.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, UInt32 waitForMultipleObjectsTimeout, Boolean allowCreate, Boolean onlyOneCheckConnection, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at Microsoft.Data.ProviderBase.DbConnectionPool.TryGetConnection(DbConnection owningObject, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection) at Microsoft.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
at Microsoft.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource1 retry, DbConnectionOptions userOptions) at Microsoft.Data.ProviderBase.DbConnectionClosed.TryOpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource1 retry, DbConnectionOptions userOptions)
at Microsoft.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource1 retry, SqlConnectionOverrides overrides) at Microsoft.Data.SqlClient.SqlConnection.Open(SqlConnectionOverrides overrides) at Microsoft.EntityFrameworkCore.SqlServer.Storage.Internal.SqlServerConnection.OpenDbConnection(Boolean errorsExpected) at Microsoft.EntityFrameworkCore.Storage.RelationalConnection.OpenInternal(Boolean errorsExpected) at Microsoft.EntityFrameworkCore.Storage.RelationalConnection.Open(Boolean errorsExpected) at Microsoft.EntityFrameworkCore.SqlServer.Storage.Internal.SqlServerDatabaseCreator.<>c__DisplayClass18_0.<Exists>b__0(DateTime giveUp) at Microsoft.EntityFrameworkCore.ExecutionStrategyExtensions.<>c__DisplayClass12_02.b__0(DbContext _, TState s)
at Microsoft.EntityFrameworkCore.SqlServer.Storage.Internal.SqlServerExecutionStrategy.Execute[TState,TResult](TState state, Func[3](https://github.com/rubemputtini/minha-academia-tem/actions/runs/11382798394/job/31668969780#step:10:3) operation, Func3 verifySucceeded)
at Microsoft.EntityFrameworkCore.ExecutionStrategyExtensions.Execute[TState,TResult](IExecutionStrategy strategy, TState state, Func2 operation, Func2 verifySucceeded)
at Microsoft.EntityFrameworkCore.SqlServer.Storage.Internal.SqlServerDatabaseCreator.Exists(Boolean retryOnNotExists)
at Microsoft.EntityFrameworkCore.SqlServer.Storage.Internal.SqlServerDatabaseCreator.Exists()
at Microsoft.EntityFrameworkCore.Migrations.HistoryRepository.Exists()
at Microsoft.EntityFrameworkCore.Migrations.Internal.Migrator.Migrate(String targetMigration)
at Microsoft.EntityFrameworkCore.Design.Internal.MigrationsOperations.UpdateDatabase(String targetMigration, String connectionString, String contextType)
at Microsoft.EntityFrameworkCore.Design.OperationExecutor.UpdateDatabaseImpl(String targetMigration, String connectionString, String contextType)
at Microsoft.EntityFrameworkCore.Design.OperationExecutor.UpdateDatabase.<>c__DisplayClass0_0.<.ctor>b__0()
at Microsoft.EntityFrameworkCore.Design.OperationExecutor.OperationBase.Execute(Action action)
ClientConnectionId:2341e5b6-f3b0-4be4-a2e6-ccc13f3f6dba
Error Number:18456,State:235,Class:14
ClientConnectionId before routing:a4e4ab80-4949-4df0-96c1-ea77a2303cf8
Routing Destination:a76eb45e3777.tr1016.brazilsouth1-a.worker.database.windows.net,11063
Login failed for user ''. The server is not currently configured to accept this token.
Error: Process completed with exit code 1.`

[andrebaltieri]

Bom dia, @rubemputtini de qual curso estamos falando e em qual parte (aula) foram expostas as credenciais?

Em adicional, me parece que seu build deu erro pois tenta acessar o banco sem sucesso neste momento:

Routing Destination:a76eb45e3[7](https://github.com/rubemputtini/minha-academia-tem/actions/runs/11382798394/job/31668969780#step:10:7)77.tr1016.brazilsouth1-a.worker.database.windows.net,11063
Login failed for user ''. The server is not currently configured to accept this token.

[rubemputtini]

Está na carreira desenvolvedor .NET no módulo do Azure, desse repositório 2812 mesmo. No seu appsettings tem a seguinte connection string:

"ConnectionStrings": { "DefaultConnection": "Server=localhost,1433;Database=Blog;User ID=sa;Password=1q2w3e4r@#$" },

A minha dúvida/dificuldade era como deveria chamar desse defaultconnection sem ter que passar o usuário e senha expostos assim.

O banco já está criado, acho que o problema está em alguma conexão mal feita...

[andrebaltieri]

Bom dia, @rubemputtini, esta informação é local, não compromete nada sua segurança:
"Server=localhost,1433;Database=Blog;User ID=sa;Password=1q2w3e4r@#$"

Mas existe uma forma melhor de resolver isto que mostro no curso Fullstack, usando dotnet user secrets.
Dá uma olhada novamente no curso!

[andrebaltieri]

E qualquer dúvida só chamar aqui!