Skip to main content Skills Marketplace Descubre y explora habilidades de IA creadas por la comunidad.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Copiar promptMostrar detalles del prompt Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.
npx skills add https://github.com/BEKO2210/Firstbrain --skill azure-identity-tsEl comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.
¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.
Descargar Zip Descargando... Ocupaciones relacionadas SOC
Basado en la clasificación ocupacional SOC
name azure-identity-ts description Authenticate to Azure services with various credential types. type skill created 2026-02-27T00:00:00.000Z domain cloud-infrastructure category azure risk unknown source community tags ["skill","cloud-infrastructure","azure","identity"]
Azure Identity SDK for TypeScript
Authenticate to Azure services with various credential types.
Installation
npm install @azure/identity
Environment Variables
Service Principal (Secret)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_SECRET=<client-secret>
Service Principal (Certificate)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_CERTIFICATE_PATH=/path/to/cert.pem
AZURE_CLIENT_CERTIFICATE_PASSWORD=<optional-password>
Workload Identity (Kubernetes)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_FEDERATED_TOKEN_FILE=/var/run/secrets/tokens/azure-identity
DefaultAzureCredential (Recommended)
import { DefaultAzureCredential } from "@azure/identity" ;
const credential = new DefaultAzureCredential ();
import { BlobServiceClient } from "@azure/storage-blob" ;
const blobClient = new BlobServiceClient (
"https://<account>.blob.core.windows.net" ,
credential
);
Credential Chain Order:
EnvironmentCredential
WorkloadIdentityCredential
ManagedIdentityCredential
VisualStudioCodeCredential
AzureCliCredential
AzurePowerShellCredential
AzureDeveloperCliCredential
Managed Identity
System-Assigned
import { ManagedIdentityCredential } from "@azure/identity" ;
const credential = new ManagedIdentityCredential ();
User-Assigned (by Client ID) const credential = new ManagedIdentityCredential ({
clientId : "<user-assigned-client-id>"
});
User-Assigned (by Resource ID) const credential = new ManagedIdentityCredential ({
resourceId : "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<name>"
});
Service Principal
Client Secret import { ClientSecretCredential } from "@azure/identity" ;
const credential = new ClientSecretCredential (
"<tenant-id>" ,
"<client-id>" ,
"<client-secret>"
);
Client Certificate import { ClientCertificateCredential } from "@azure/identity" ;
const credential = new ClientCertificateCredential (
"<tenant-id>" ,
"<client-id>" ,
{ certificatePath : "/path/to/cert.pem" }
);
const credentialWithPwd = new ClientCertificateCredential (
"<tenant-id>" ,
"<client-id>" ,
{
certificatePath : "/path/to/cert.pem" ,
certificatePassword : "<password>"
}
);
Interactive Authentication
Browser-Based Login import { InteractiveBrowserCredential } from "@azure/identity" ;
const credential = new InteractiveBrowserCredential ({
clientId : "<client-id>" ,
tenantId : "<tenant-id>" ,
loginHint : "user@example.com"
});
Device Code Flow import { DeviceCodeCredential } from "@azure/identity" ;
const credential = new DeviceCodeCredential ({
clientId : "<client-id>" ,
tenantId : "<tenant-id>" ,
userPromptCallback : (info ) => {
console .log (info.message );
}
});
Custom Credential Chain import {
ChainedTokenCredential ,
ManagedIdentityCredential ,
AzureCliCredential
} from "@azure/identity" ;
const credential = new ChainedTokenCredential (
new ManagedIdentityCredential (),
new AzureCliCredential ()
);
Developer Credentials
Azure CLI import { AzureCliCredential } from "@azure/identity" ;
const credential = new AzureCliCredential ();
Azure Developer CLI import { AzureDeveloperCliCredential } from "@azure/identity" ;
const credential = new AzureDeveloperCliCredential ();
Azure PowerShell import { AzurePowerShellCredential } from "@azure/identity" ;
const credential = new AzurePowerShellCredential ();
Sovereign Clouds import { ClientSecretCredential , AzureAuthorityHosts } from "@azure/identity" ;
const credential = new ClientSecretCredential (
"<tenant>" , "<client>" , "<secret>" ,
{ authorityHost : AzureAuthorityHosts .AzureGovernment }
);
const credentialChina = new ClientSecretCredential (
"<tenant>" , "<client>" , "<secret>" ,
{ authorityHost : AzureAuthorityHosts .AzureChina }
);
Bearer Token Provider import { DefaultAzureCredential , getBearerTokenProvider } from "@azure/identity" ;
const credential = new DefaultAzureCredential ();
const getAccessToken = getBearerTokenProvider (
credential,
"https://cognitiveservices.azure.com/.default"
);
const token = await getAccessToken ();
Key Types import type {
TokenCredential ,
AccessToken ,
GetTokenOptions
} from "@azure/core-auth" ;
import {
DefaultAzureCredential ,
DefaultAzureCredentialOptions ,
ManagedIdentityCredential ,
ClientSecretCredential ,
ClientCertificateCredential ,
InteractiveBrowserCredential ,
ChainedTokenCredential ,
AzureCliCredential ,
AzurePowerShellCredential ,
AzureDeveloperCliCredential ,
DeviceCodeCredential ,
AzureAuthorityHosts
} from "@azure/identity" ;
Custom Credential Implementation import type { TokenCredential , AccessToken , GetTokenOptions } from "@azure/core-auth" ;
class CustomCredential implements TokenCredential {
async getToken (
scopes : string | string [],
options ?: GetTokenOptions
): Promise <AccessToken | null > {
return {
token : "<access-token>" ,
expiresOnTimestamp : Date .now () + 3600000
};
}
}
Debugging import { setLogLevel, AzureLogger } from "@azure/logger" ;
setLogLevel ("verbose" );
AzureLogger .log = (...args ) => {
console .log ("[Azure]" , ...args);
};
Best Practices
Use DefaultAzureCredential - Works in development (CLI) and production (managed identity)
Never hardcode credentials - Use environment variables or managed identity
Prefer managed identity - No secrets to manage in production
Scope credentials appropriately - Use user-assigned identity for multi-tenant scenarios
Handle token refresh - Azure SDK handles this automatically
Use ChainedTokenCredential - For custom fallback scenarios
When to Use This skill is applicable to execute the workflow or actions described in the overview.
Connections
Domain: [[Cloud & Infrastruktur]]
Kategorie: [[Microsoft Azure]]
Navigation: [[Skills Uebersicht]], [[Home]]