README.md

page_type	languages	products	description	urlFragment
sample	javascript	azure	This sample repo demonstrates how to connect and authenticate to an Azure Key Vault vault.	key-vault-node-authentication

Authentication for Azure Key Vault using the Azure Node SDK

This sample repo demonstrates how to connect and authenticate to an Azure Key Vault vault. To do so, it first uses the Key Vault Management Client to create a vault. The Key Vault secret client is then used to authenticate to the vault and set/retrieve a sample secret.

Prerequisites

If you don't have an Azure subscription, please create a free account before you begin. In addition you would need

• Node
  • Please install Node JS. This can be run on Windows, Mac and Linux.
• Git
  • Please download git from here.
• Azure CLI
  • For the purpose of this tutorial we would work with Azure CLI which is available on Windows, Mac and Linux

Quickstart

1. Clone the repo.

   git clone https://github.com/Azure-Samples/key-vault-node-authentication.git key-vault
   

2. Install the dependencies.

   cd key-vault
   npm install
   

3. Create an Azure service principals, using one of the following:

   • Azure CLI,
   • PowerShell
   • Azure Portal.

   This service principal is to run the sample on your azure account.

4. Set the following environment variables using the information from the service principal that you created.

   export AZURE_SUBSCRIPTION_ID={your subscription id}
   export AZURE_CLIENT_ID={your client id}
   export AZURE_CLIENT_SECRET={your client secret}
   export AZURE_TENANT_ID={your tenant id as a GUID}
   export AZURE_CLIENT_OID={Object id of the service principal}
   

On Windows, use set instead of export.

5. Run the sample.

   node authentication_sample.js
   

References and further reading

• More samples for Key Vault secrets
• @azure/keyvault-secrets package
• @azure/arm-keyvault package
• @azure/arm-resources package
• Azure KeyVault Documentation
• Key Vault REST API Reference
• Manage Key Vault using CLI
• Storing and using secrets in Azure