azure library
Azure Key Vault as a secrets provider for Tom servers.
Register a TomAzureKeyVaultSecretsProvider with TomSecrets.register,
and every configuration value written as secret:azure:<name>[#<field>]
is read from Key Vault when the boot calls TomSecrets.load.
Classes
- TomAzureClientSecretCredential
- A service principal: clientId and clientSecret in tenantId.
- TomAzureCredential
- Obtains the bearer token Key Vault requests carry.
- TomAzureKeyVaultSecretsProvider
-
A
TomSecretsProviderover Azure Key Vault. - TomAzureManagedIdentityCredential
- The managed identity of the host the server runs on.
- TomAzureStaticTokenCredential
-
A token obtained elsewhere — a developer's
az account get-access-token, or a test.
Constants
- tomAzureKeyVaultResource → const String
- The resource a managed-identity token is requested for.
- tomAzureKeyVaultScope → const String
- The scope a Key Vault token is requested for.