search

spring-projects / spring-ai

An Application Framework for AI Engineering
https://docs.spring.io/spring-ai/reference/index.html
Apache License 2.0
3.27k stars 837 forks source link

Support Azure TokenCredential for authentication against Azure OpenAI #1624

Open asaikali opened 2 weeks ago

asaikali commented 2 weeks ago

The current AzureOpenAI auto-configuration code assume that the users will provide a static api key if no key is set, then an exception is throw see https://github.com/spring-projects/spring-ai/blob/ca1949c8250187d94d735665b2044a844234aa51/spring-ai-spring-boot-autoconfigure/src/main/java/org/springframework/ai/autoconfigure/azure/openai/AzureOpenAiAutoConfiguration.java#L66

Azure supports a keyless authentication mode that uses Azure Active Directory and system identity. Some users of Azure will disable key based accessed for the Azure Open AI service and those users can't use spring-ai with azure open ai.

Todo:

Reference https://learn.microsoft.com/en-us/azure/developer/java/spring-framework/authentication

Resources:

KKulma commented 5 days ago

I second this—at the very least, please provide documentation on how to update relevant scripts to enable authentication via Service Principal. We're wrestling with it at the moment, and autoconfiguration is stubbornly hard to override!