CODEWITHSUNDEEP
c#azurewindows-servicesazure-keyvault
CrazyCoder
CrazyCoder

Reputation: 2388

Client address is not authorized and caller is not a trusted service in Azure

I'm working on Azure. I have a windows service which accesses the Azure Key Vault.

My code looks something like this:

public static async Task<string> GetToken(string authority, string resource, string scope)
{
    var authContext = new AuthenticationContext(authority);
    ClientCredential clientCred = new ClientCredential(...); //app id, app secret
    AuthenticationResult result = await authContext.AcquireTokenAsync(resource, clientCred);

    if (result == null)
        throw new InvalidOperationException("Failed to obtain the JWT token");

    return result.AccessToken;
}

public static string GetSecret(string secretName)
{
    KeyVaultClient keyVaultClient = new KeyVaultClient(GetToken);
    try
    {
        return keyVaultClient.GetSecretAsync("my-key-vault-url", secretName).Result.Value;
    }
    catch(Exception ex)
    {
        return "Error";
    }
}

After I build and deploy my windows service, I have started it. Then I'm getting this exception:

Client address (IPaddress) is not authorized and caller is not a trusted service

However, I am able to do a telnet to the key vault:

telnet projectName-keyvault 443

I have searched for this issue, but couldn't find any solution. What can I try next?

Upvotes: 10

Views: 40043

Answers (3)

Nancy Xiong
Nancy Xiong

Reputation: 28264

The error properly shows that your client IP address is not authorized.

You need to add the client IP of in your Azure keyvault, if you've enabled that setting.

Azure > Keyvault > Networking Settings

Further Reading:

Upvotes: 19

CrazyCoder
CrazyCoder

Reputation: 2388

what @Nancy Xiong - MSFT , has commented was the issue with my key Vault.

In firewalls and Virtual Networks of the key Vault, I have added the IP address from which it is accessing the key vault.It solved my problem.

Upvotes: 1

Sumit Garg
Sumit Garg

Reputation: 453

I tried your code and i am able to fetch the data from the key vault. enter image description here

Upvotes: 1

Related Questions