Failed to get secret with release 1.0.0

[epot]

I have the following code:

ApplicationTokenCredentials credentials = new ApplicationTokenCredentials(
        applicationId,
        tenantId,
        secret,
        null);
KeyVaultClient client = new KeyVaultClient(credentials);

And then:

 client.getSecret("https://myvault.vault.azure.net/", secretName)

And I end up with:

 {"error_description":"AADSTS50001: The application named https:\/\/{vaultbaseurl}\/ was not found in the tenant named

This looks strangely like an issue opened in another repository Azure/autorest#1234. Does it mean this keyvault client has been released with this issue ?

Here are the dependencies I declare:

• "com.microsoft.azure" % "azure-keyvault" % "1.0.0"
• "com.microsoft.rest" % "client-runtime" % "1.0.0"
• "com.microsoft.azure" % "azure-client-runtime" % "1.0.0"
• "com.microsoft.azure" % "azure-client-authentication" % "1.0.0-beta6"

[pomortaz]

@epot the error is actually misleading. I could reproduce the error when I use the authentication package you use. The recommendation is to use ADAL library for authentication.

Use the following dependency in addition to azure-keyvault maven package:

<dependency>
    <groupId>com.microsoft.azure</groupId>
    <artifactId>adal4j</artifactId>
    <version>1.2.0</version>
</dependency>

and then create an instance of KeyVaultClient by overriding the doAuthenticate abstract method from KeyVaultCredentials:

    KeyVaultClient kv = new KeyVaultClient(new KeyVaultCredentials() {
        
        @Override
        public String doAuthenticate(String authorization, String resource, String scope) {
            
            AuthenticationContext context;
            try {
                context = new AuthenticationContext(authorization, false, Executors.newFixedThreadPool(1));
                ClientCredential credentials = new ClientCredential(clientId, clientKey);
                AuthenticationResult result = context.acquireToken(resource, credentials, null).get();
                return result.getAccessToken();
            } catch (Exception e) {
                e.printStackTrace();
            }
            return "";
        }
    });

@jianghaolu do you know why ApplicationTokenCredentials from azure-client-authentication package is failing for @epot? Is it been correctly used? The error says "The application named https://{vaultbaseurl}/ was not found in the tenant.."

[jianghaolu]

Hi @epot

What was the value you passed for applicationId and tenantId in your code snippet?

[epot]

Thanks @pomortaz I actually found this workaround myself. I just wonder what this error means.
I do not remember which values I put unfortunately for tenantId.

[allenhula]

Same issue founded, and I am sure I set the right application id and tenant id, because I can successfully use same values to get the secret from key vault via pure REST API way. The workaround works as well.
my application id: 235ac54f-7255-4ea1-8827-6101b3f9963
tenant id: 954ddad8-66d7-47a8-8f9f-1316152d9587
and application named mileyapp, not the "https://{vaultbaseurl}/" in error message.

I just had a quick check, seems like this "https://{vaultbaseurl}/ " is passed in when initializing KeyVaultClientImpl, and this value will be set into RestClient.baseUrl. Not sure how it is used later, but should be something wrong here.

public KeyVaultClientImpl(ServiceClientCredentials credentials) {
        this("https://{vaultBaseUrl}", credentials);
    }