Having trouble with DefaultAzureCredential in Azure

Question

Having trouble with DefaultAzureCredential in Azure

My current project involves utilizing Azure Storage, and to authenticate I am leveraging the DefaultAzureCredential. After logging in with the az login command, I encountered an error response when running my Azure function.

{ "message": "{"odata.error":{"code":"AuthorizationPermissionMismatch","message":{"lang":"en-US","value":"This request is not authorized to perform this operation using this permission.\nRequestId:1fedb6ef-3002-0070-7133-fc1d53000000\nTime:2023-10-11T11:09:48.2823331Z"}}}" }

Upon attempting to troubleshoot in the console:

const credential = new DefaultAzureCredential();

console.log(credential)

The output showed:

DefaultAzureCredential { [2023-10-11T11:17:18.644Z] UnavailableMessage: 'DefaultAzureCredential => failed to retrieve a token from the included credentials. To troubleshoot, visit  [https://aka.ms/azsdk/js/identity/defaultazurecredential/troubleshoot.'](https://aka.ms/azsdk/js/identity/defaultazurecredential/troubleshoot.%27), [2023-10-11T11:17:18.645Z] _sources: [

I am puzzled as to why tokens are not being retrieved from my CLI. Even after attempting to use AzureCliCredential, the issue persists.

If anyone has insights on how to address this problem, please share your solutions.

My setup includes a Macbook Air M1 2020 running OS Ventura 13.3.

typescript azure azure-functions defaultazurecredential

Answer 1

Answer №1

After experimenting with DefaultAzureCredentials in my local VS Code and attempting to access a blob within my storage container using a typescript Azure function, I successfully managed to retrieve the Blob content as shown below:-

To achieve this, I granted myself the Storage Blob Data Contributor role at the Storage account level as illustrated below:-

This role is assigned at the subscription level and inherited, but it can also be added at the storage account resource level.

Snippet of my httpTrigger1.ts file:

import { app, HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
import { BlobServiceClient, ContainerClient } from "@azure/storage-blob";
import { DefaultAzureCredential } from "@azure/identity";

const containerName = "data"; // Replace with your container name
const blobName = "blob.txt"; // Replace with your blob name

export async function httpTrigger1(request: HttpRequest, context: InvocationContext): Promise<HttpResponseInit> {
    context.log(`Http function processed request for url "${request.url}"`);

    const name = request.query.get('name') || await request.text() || 'world';

    // Using DefaultAzureCredential for authentication
    const credential = new DefaultAzureCredential();

    // Initializing BlobServiceClient with DefaultAzureCredential
    const blobServiceClient = new BlobServiceClient("https://siliconrg54.blob.core.windows.net", credential);

    // Accessing a container
    const containerClient = blobServiceClient.getContainerClient(containerName);

    // Accessing a blob
    const blobClient = containerClient.getBlobClient(blobName);
    const blobContent = (await blobClient.download(0)).readableStreamBody;

    return { body: `Hello, ${name}! Blob Content: ${blobContent.toString()}` };
}

app.http('httpTrigger1', {
    methods: ['GET', 'POST'],
    authLevel: 'anonymous',
    handler: httpTrigger1
});

az login
az account set --subscription "Subscription-name"

Output:

In addition, I have successfully logged into my Account via the Vs code extension here:-

Reference:

Assign an Azure role for access to blob data - Azure Storage | Microsoft Learn

Answer 2

After experimenting with DefaultAzureCredentials in my local VS Code and attempting to access a blob within my storage container using a typescript Azure function, I successfully managed to retrieve the Blob content as shown below:-

To achieve this, I granted myself the Storage Blob Data Contributor role at the Storage account level as illustrated below:-

This role is assigned at the subscription level and inherited, but it can also be added at the storage account resource level.

Snippet of my httpTrigger1.ts file:

import { app, HttpRequest, HttpResponseInit, InvocationContext } from "@azure/functions";
import { BlobServiceClient, ContainerClient } from "@azure/storage-blob";
import { DefaultAzureCredential } from "@azure/identity";

const containerName = "data"; // Replace with your container name
const blobName = "blob.txt"; // Replace with your blob name

export async function httpTrigger1(request: HttpRequest, context: InvocationContext): Promise<HttpResponseInit> {
    context.log(`Http function processed request for url "${request.url}"`);

    const name = request.query.get('name') || await request.text() || 'world';

    // Using DefaultAzureCredential for authentication
    const credential = new DefaultAzureCredential();

    // Initializing BlobServiceClient with DefaultAzureCredential
    const blobServiceClient = new BlobServiceClient("https://siliconrg54.blob.core.windows.net", credential);

    // Accessing a container
    const containerClient = blobServiceClient.getContainerClient(containerName);

    // Accessing a blob
    const blobClient = containerClient.getBlobClient(blobName);
    const blobContent = (await blobClient.download(0)).readableStreamBody;

    return { body: `Hello, ${name}! Blob Content: ${blobContent.toString()}` };
}

app.http('httpTrigger1', {
    methods: ['GET', 'POST'],
    authLevel: 'anonymous',
    handler: httpTrigger1
});

az login
az account set --subscription "Subscription-name"

Output:

In addition, I have successfully logged into my Account via the Vs code extension here:-

Reference:

Assign an Azure role for access to blob data - Azure Storage | Microsoft Learn

Having trouble with DefaultAzureCredential in Azure

Answer №1

Similar questions

The width of mat-table columns remains static even with the presence of an Input field

Leveraging the power of JSON within a JavaScript object in an Azure HTTP trigger

What is the best approach for setting up a global pipe that can be utilized across various modules?

Associate the generic operator <T> with a FunctionConstructor

What is the best way to inject Angular services into Tabulator JS?

typescript logic description found

Attempting to showcase information on the Angular frontend

Incorporate the leaflet Draw feature into your Angular 2 application

The 'provide' name in the app.module.ts file is not recognized by TypeScript, resulting in error code ts(2304)

Using TypeScript to retrieve a strongly typed promiseValue from an angular $modalInstanceA

Converting a string[] to an EventEmitter string[] in Angular 4 with TypeScript: Step-by-step guide

Having trouble with reloading or navigating directly to a dynamic route in Next JS?

Using Typescript to iterate through an array of asynchronous functions

Tips on how to hide items from printing if they are not true in Vanilla JavaScript/TypeScript and Angular 9

Trouble with storing data in Angular Reactive Form

Error message: Unable to connect to Windows Azure server due to unavailable RPC Server

Tips for integrating TypeScript with Vue.js and Single File Components

What is the method for removing an item from my TypeScript to-do list?

Dynamic importing fails to locate file without .js extension

TS2304: Unable to locate variable '_ZonePrivate'