workload_identity_credential.hpp

Go to the documentation of this file.

// Copyright (c) Microsoft Corporation.
// Licensed under the MIT License.
 
#pragma once
 
#include "azure/identity/client_assertion_credential.hpp"
#include "azure/identity/detail/client_credential_core.hpp"
#include "azure/identity/detail/token_cache.hpp"
 
#include <azure/core/credentials/token_credential_options.hpp>
 
#include <string>
#include <vector>
 
namespace Azure { namespace Identity {
  namespace _detail {
    class ClientAssertionCredentialImpl;
  } // namespace _detail
 
  struct WorkloadIdentityCredentialOptions final : public Core::Credentials::TokenCredentialOptions
  {
    std::string TenantId = _detail::DefaultOptionValues::GetTenantId();
 
    std::string ClientId = _detail::DefaultOptionValues::GetClientId();
 
    std::string AuthorityHost = _detail::DefaultOptionValues::GetAuthorityHost();
 
    std::string TokenFilePath = _detail::DefaultOptionValues::GetFederatedTokenFile();
 
    std::vector<std::string> AdditionallyAllowedTenants;
  };
 
  class WorkloadIdentityCredential final : public Core::Credentials::TokenCredential {
  private:
    std::unique_ptr<_detail::ClientAssertionCredentialImpl> m_clientAssertionCredentialImpl;
    std::string m_tokenFilePath;
 
    std::string GetAssertion(Core::Context const& context) const;
 
  public:
    explicit WorkloadIdentityCredential(
        Core::Credentials::TokenCredentialOptions const& options
        = Core::Credentials::TokenCredentialOptions());
 
    explicit WorkloadIdentityCredential(WorkloadIdentityCredentialOptions const& options);
 
    ~WorkloadIdentityCredential() override;
 
    Core::Credentials::AccessToken GetToken(
        Core::Credentials::TokenRequestContext const& tokenRequestContext,
        Core::Context const& context) const override;
  };
 
}} // namespace Azure::Identity