从azure函数创建azure承载令牌

Question

如何从azure函数中创建azure承载授权令牌，以便通过rest API在azure VM中运行azure run命令？纪录片帮不上忙

Answer 1

获取访问令牌非常容易，下面是一个httpTrigger函数示例供您参考：

#r "Newtonsoft.Json"
#r "Microsoft.IdentityModel.Clients.ActiveDirectory"

using System.Net;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Primitives;
using Newtonsoft.Json;
using Microsoft.IdentityModel.Clients.ActiveDirectory;

public static async Task<IActionResult> Run(HttpRequest req, ILogger log)
{
    string AadInstance = "https://login.microsoftonline.com/{0}";
    string ResourceId = "https://management.azure.com/";
    AuthenticationContext authenticationContext = new AuthenticationContext(string.Format(AadInstance, "{tenant}"));
    authenticationContext.ExtendedLifeTimeEnabled = true;
    ClientCredential clientCredential = new ClientCredential("{clientId}", "{clientSecret}");
    AuthenticationResult authticationResult = authenticationContext.AcquireTokenAsync(ResourceId, clientCredential).Result;
    string token=authticationResult.AccessToken;

    return (ActionResult)new OkObjectResult($"bearer token is: {token}");
}

如果您不知道如何获取clientId和clientSecret，您可以按照此document在Azure门户上注册应用程序。