@@ -13,6 +13,7 @@ public class SecretReaderFactory : ISecretReaderFactory
13
13
internal const string KeyVaultConfigurationPrefix = "KeyVault." ;
14
14
internal const string UseManagedIdentityConfigurationKey = "UseManagedIdentity" ;
15
15
internal const string VaultNameConfigurationKey = "VaultName" ;
16
+ internal const string TenantIdConfigurationKey = "TenantId" ;
16
17
internal const string ClientIdConfigurationKey = "ClientId" ;
17
18
internal const string CertificateThumbprintConfigurationKey = "CertificateThumbprint" ;
18
19
internal const string CertificateStoreLocation = "StoreLocation" ;
@@ -50,20 +51,21 @@ public ISecretReader CreateSecretReader()
50
51
if ( ! string . IsNullOrEmpty ( vaultName ) )
51
52
{
52
53
var useManagedIdentity = GetOptionalKeyVaultBoolSettingValue ( UseManagedIdentityConfigurationKey , defaultValue : false ) ;
54
+ var clientId = _configurationService . ReadRawSetting ( ResolveKeyVaultSettingName ( ClientIdConfigurationKey ) ) ;
53
55
54
56
KeyVaultConfiguration keyVaultConfiguration ;
55
57
if ( useManagedIdentity )
56
58
{
57
- keyVaultConfiguration = new KeyVaultConfiguration ( vaultName ) ;
59
+ keyVaultConfiguration = new KeyVaultConfiguration ( vaultName , clientId ) ;
58
60
}
59
61
else
60
62
{
61
- var clientId = _configurationService . ReadRawSetting ( ResolveKeyVaultSettingName ( ClientIdConfigurationKey ) ) ;
63
+ var tenantId = _configurationService . ReadRawSetting ( ResolveKeyVaultSettingName ( TenantIdConfigurationKey ) ) ;
62
64
var certificateThumbprint = _configurationService . ReadRawSetting ( ResolveKeyVaultSettingName ( CertificateThumbprintConfigurationKey ) ) ;
63
65
var storeName = GetOptionalKeyVaultEnumSettingValue ( CertificateStoreName , StoreName . My ) ;
64
66
var storeLocation = GetOptionalKeyVaultEnumSettingValue ( CertificateStoreLocation , StoreLocation . LocalMachine ) ;
65
67
var certificate = CertificateUtility . FindCertificateByThumbprint ( storeName , storeLocation , certificateThumbprint , validationRequired : true ) ;
66
- keyVaultConfiguration = new KeyVaultConfiguration ( vaultName , clientId , certificate ) ;
68
+ keyVaultConfiguration = new KeyVaultConfiguration ( vaultName , tenantId , clientId , certificate ) ;
67
69
}
68
70
69
71
secretReader = new KeyVaultReader ( keyVaultConfiguration ) ;
0 commit comments