Skip to main content Skills Marketplace Découvrez et explorez les compétences IA créées par la communauté.
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Afficher les détails du prompt Une commande directe contourne le prompt de vérification. Examinez la source avant de l'exécuter.
npx skills add https://github.com/BEKO2210/Firstbrain --skill azure-identity-tsLa commande reste sur une seule ligne. Faites défiler horizontalement pour la vérifier avant de la copier.
Vous préférez une copie locale ? Téléchargez les fichiers actuellement disponibles dans SkillsMP.
Télécharger Zip Téléchargement... Métiers associés SOC
Basé sur la classification professionnelle SOC
name azure-identity-ts description Authenticate to Azure services with various credential types. type skill created 2026-02-27T00:00:00.000Z domain cloud-infrastructure category azure risk unknown source community tags ["skill","cloud-infrastructure","azure","identity"]
Azure Identity SDK for TypeScript
Authenticate to Azure services with various credential types.
Installation
npm install @azure/identity
Environment Variables
Service Principal (Secret)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_SECRET=<client-secret>
Service Principal (Certificate)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_CLIENT_CERTIFICATE_PATH=/path/to/cert.pem
AZURE_CLIENT_CERTIFICATE_PASSWORD=<optional-password>
Workload Identity (Kubernetes)
AZURE_TENANT_ID=<tenant-id>
AZURE_CLIENT_ID=<client-id>
AZURE_FEDERATED_TOKEN_FILE=/var/run/secrets/tokens/azure-identity
DefaultAzureCredential (Recommended)
import { DefaultAzureCredential } from "@azure/identity" ;
const credential = new DefaultAzureCredential ();
import { BlobServiceClient } from "@azure/storage-blob" ;
const blobClient = new BlobServiceClient (
"https://<account>.blob.core.windows.net" ,
credential
);
Credential Chain Order:
EnvironmentCredential
WorkloadIdentityCredential
ManagedIdentityCredential
VisualStudioCodeCredential
AzureCliCredential
AzurePowerShellCredential
AzureDeveloperCliCredential
Managed Identity
System-Assigned
import { ManagedIdentityCredential } from "@azure/identity" ;
const credential = new ManagedIdentityCredential ();
User-Assigned (by Client ID) const credential = new ManagedIdentityCredential ({
clientId : "<user-assigned-client-id>"
});
User-Assigned (by Resource ID) const credential = new ManagedIdentityCredential ({
resourceId : "/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.ManagedIdentity/userAssignedIdentities/<name>"
});
Service Principal
Client Secret import { ClientSecretCredential } from "@azure/identity" ;
const credential = new ClientSecretCredential (
"<tenant-id>" ,
"<client-id>" ,
"<client-secret>"
);
Client Certificate import { ClientCertificateCredential } from "@azure/identity" ;
const credential = new ClientCertificateCredential (
"<tenant-id>" ,
"<client-id>" ,
{ certificatePath : "/path/to/cert.pem" }
);
const credentialWithPwd = new ClientCertificateCredential (
"<tenant-id>" ,
"<client-id>" ,
{
certificatePath : "/path/to/cert.pem" ,
certificatePassword : "<password>"
}
);
Interactive Authentication
Browser-Based Login import { InteractiveBrowserCredential } from "@azure/identity" ;
const credential = new InteractiveBrowserCredential ({
clientId : "<client-id>" ,
tenantId : "<tenant-id>" ,
loginHint : "user@example.com"
});
Device Code Flow import { DeviceCodeCredential } from "@azure/identity" ;
const credential = new DeviceCodeCredential ({
clientId : "<client-id>" ,
tenantId : "<tenant-id>" ,
userPromptCallback : (info ) => {
console .log (info.message );
}
});
Custom Credential Chain import {
ChainedTokenCredential ,
ManagedIdentityCredential ,
AzureCliCredential
} from "@azure/identity" ;
const credential = new ChainedTokenCredential (
new ManagedIdentityCredential (),
new AzureCliCredential ()
);
Developer Credentials
Azure CLI import { AzureCliCredential } from "@azure/identity" ;
const credential = new AzureCliCredential ();
Azure Developer CLI import { AzureDeveloperCliCredential } from "@azure/identity" ;
const credential = new AzureDeveloperCliCredential ();
Azure PowerShell import { AzurePowerShellCredential } from "@azure/identity" ;
const credential = new AzurePowerShellCredential ();
Sovereign Clouds import { ClientSecretCredential , AzureAuthorityHosts } from "@azure/identity" ;
const credential = new ClientSecretCredential (
"<tenant>" , "<client>" , "<secret>" ,
{ authorityHost : AzureAuthorityHosts .AzureGovernment }
);
const credentialChina = new ClientSecretCredential (
"<tenant>" , "<client>" , "<secret>" ,
{ authorityHost : AzureAuthorityHosts .AzureChina }
);
Bearer Token Provider import { DefaultAzureCredential , getBearerTokenProvider } from "@azure/identity" ;
const credential = new DefaultAzureCredential ();
const getAccessToken = getBearerTokenProvider (
credential,
"https://cognitiveservices.azure.com/.default"
);
const token = await getAccessToken ();
Key Types import type {
TokenCredential ,
AccessToken ,
GetTokenOptions
} from "@azure/core-auth" ;
import {
DefaultAzureCredential ,
DefaultAzureCredentialOptions ,
ManagedIdentityCredential ,
ClientSecretCredential ,
ClientCertificateCredential ,
InteractiveBrowserCredential ,
ChainedTokenCredential ,
AzureCliCredential ,
AzurePowerShellCredential ,
AzureDeveloperCliCredential ,
DeviceCodeCredential ,
AzureAuthorityHosts
} from "@azure/identity" ;
Custom Credential Implementation import type { TokenCredential , AccessToken , GetTokenOptions } from "@azure/core-auth" ;
class CustomCredential implements TokenCredential {
async getToken (
scopes : string | string [],
options ?: GetTokenOptions
): Promise <AccessToken | null > {
return {
token : "<access-token>" ,
expiresOnTimestamp : Date .now () + 3600000
};
}
}
Debugging import { setLogLevel, AzureLogger } from "@azure/logger" ;
setLogLevel ("verbose" );
AzureLogger .log = (...args ) => {
console .log ("[Azure]" , ...args);
};
Best Practices
Use DefaultAzureCredential - Works in development (CLI) and production (managed identity)Never hardcode credentials - Use environment variables or managed identityPrefer managed identity - No secrets to manage in productionScope credentials appropriately - Use user-assigned identity for multi-tenant scenariosHandle token refresh - Azure SDK handles this automaticallyUse ChainedTokenCredential - For custom fallback scenarios
When to Use This skill is applicable to execute the workflow or actions described in the overview.
Connections
Domain: [[Cloud & Infrastruktur]]Kategorie: [[Microsoft Azure]]Navigation: [[Skills Uebersicht]], [[Home]] 