wapacro / az-keyvault-php

Library to easily work with Azure Key Vault using managed identities
https://packagist.org/packages/wapacro/az-keyvault-php
MIT License
18 stars 15 forks source link

Add client credentials support + fix managed identity authentication #24

Open Neurones67 opened 8 months ago

Neurones67 commented 8 months ago

This proposal add a way to obtain a bearer from azure with the client_credentials flow (with a client_id and secret) in addition of the managed identity authentication.

It fixed also the authentication with managed identities, by adding the metadata header (to fix SSRF issues on azure side), it adds support of user-assigned managed identities in addition of system-assigned one (by adding the client_id)