CODEWITHSUNDEEP
node.jsazureblobazure-service-principal
Saligia
Saligia

Reputation: 177

Is it possible to use service principal to access blob storage?

I am now trying to use Service Principal to access azure blob storage in nodes, instead of using connection string.

What I did (and succeeded) is using connection string as follows:

// connect via connection string
const AZURE_STORAGE_CONNECTION_STRING = process.env.AZURE_STORAGE_CONNECTION_STRING;
const blobServiceClient = BlobServiceClient.fromConnectionString(AZURE_STORAGE_CONNECTION_STRING);

Now I want to use Service Principal instead of connection string, but I can't seem to make it work. I can see some examples using some token credentials, e.g.

const blobServiceClient = new BlobServiceClient(
    `https://${account}.blob.core.windows.net`,
    defaultAzureCredential
);

Is it possible to use service principal credentials this way, or are there other ways to do this?

Upvotes: 2

Views: 2382

Answers (1)

Stanley Gong
Stanley Gong

Reputation: 12153

Try this :

const { BlobServiceClient } = require("@azure/storage-blob");
const { ClientSecretCredential } = require("@azure/identity");

const account = '<your accounr name>'
//Using  Service Principal
const appID = ""
const appSec = ""
const tenantID = ""

const clientCred = new ClientSecretCredential(tenantID,appID,appSec)

const blobServiceClient = new BlobServiceClient(
    `https://${account}.blob.core.windows.net`,
    clientCred
);

//try to list all containers in stroage account to check if success
blobServiceClient.listContainers().byPage().next().then(result =>{
    result.value.containerItems.forEach(element => {
       console.log(element.name);
   });

})

Result:

enter image description here

Note:

Before you run this demo, pls make sure that you have granted the required permissions to your Service Principal, details see this official doc.

Upvotes: 1

Related Questions