部署 XML 策略到 APIM 使用 Bicep。

huangapple
go评论84阅读模式
英文:

deploying xml policy to apim using bicep

问题

  1. 我想将以下策略部署到Azure API管理：
  3. ```xml
  4. <policies>
  5.     <inbound>
  6.     <base />
  7.     <choose>
  8.         <when condition="@(!context.Variables.ContainsKey('cachedAccessToken') || DateTime.UtcNow >= (DateTime)context.Variables['tokenExpiry'])">
  9.             <set-backend-service id="apim-generated-policy" backend-id="{0}" />
  10.             <send-request mode="new" response-variable-name="tokenResponse" timeout="20" ignore-error="false">
  11.                 <set-url>{1}/token</set-url>
  12.                 <set-method>POST</set-method>
  13.                 <set-header name="Content-Type" exists-action="override">
  14.                     <value>application/x-www-form-urlencoded</value>
  15.                 </set-header>
  16.                 <set-body>@("grant_type=password&username={2}&password=thisShouldRefThe-AmxPassword-NamedValue")</set-body>
  17.             </send-request>
  18.             <set-variable name="tokenResponseJson" value="@{{ return JsonConvert.DeserializeObject((string)context.Variables['tokenResponse'].Body.As<string>()); }}" />
  19.             <set-variable name="cachedAccessToken" value="@{{(string)context.Variables['tokenResponseJson']['access_token']}}" />
  20.             <set-variable name="tokenExpiry" value="@{{ return DateTime.UtcNow.AddSeconds((int)context.Variables['tokenResponseJson']['expires_in'] - 60); }}" />
  21.             <cache-store-value key="cachedAccessToken" value="@{{context.Variables['cachedAccessToken']}}" duration="@{{(new TimeSpan(0, (int)context.Variables['tokenResponseJson']['expires_in'], 0))}}" />
  22.             <cache-store-value key="tokenExpiry" value="@{{context.Variables['tokenExpiry']}}" duration="@{{(new TimeSpan(0, (int)context.Variables['tokenResponseJson']['expires_in'], 0))}}" />
  23.         </when>
  24.         <otherwise>
  25.             <cache-lookup-value key="cachedAccessToken" variable-name="cachedAccessToken" />
  26.             <cache-lookup-value key="tokenExpiry" variable-name="tokenExpiry" />
  27.         </otherwise>
  28.     </choose>
  29.     <set-header name="Authorization" exists-action="override">
  30.         <value>@{{$"Bearer {{context.Variables['cachedAccessToken']}}}}</value>
  31.     </set-header>
  32.     </inbound>
  33.     <backend>
  34.         <base />
  35.     </backend>
  36.     <outbound>
  37.         <base />
  38.     </outbound>
  39.     <on-error>
  40.         <base />
  41.     </on-error>
  42. </policies>

这是由DevOps管道运行的Bicep代码：

  1. resource apim 'Microsoft.ApiManagement/service@2022-04-01-preview' existing = {
  2.     name: apimName
  4.     resource apiVersionSet 'api-version-sets@2018-06-01-preview' = if (enableApiVersioning) {
  5.         name: apiName
  6.         properties: {
  7.             displayName: displayName
  8.             versioningScheme: versionScheme
  9.             versionHeaderName: 'X-Api-Version'
  10.             versionQueryName: 'api-version'
  11.         }
  12.     }
  14.     resource api 'apis' = {
  15.         name: enableApiVersioning ? apiNameVersioned : apiName
  16.         properties: {
  17.             displayName: displayName
  18.             path: '${pathPrefix}${apiName}'
  19.             format: definitionFormat
  20.             protocols: [
  21.                 'https'
  22.             ]
  23.             subscriptionRequired: true
  24.             value: definition
  25.             apiVersion: enableApiVersioning ? version : null
  26.             apiVersionSetId: enableApiVersioning ? apiVersionSet.id : null
  27.             subscriptionKeyParameterNames: {
  28.                 header: 'Ocp-Apim-Subscription-Key'
  29.                 query: 'subscription-key'
  30.             }
  31.         }
  33.         resource apiPolicy 'policies' = if (!empty(policy)) {
  34.             name: 'policy'
  35.             properties: {
  36.                 value: policy
  37.             }
  38.         }
  39.     }
  40. }

我收到以下错误：

'='是意外的标记。预期的标记是';'。第13行，位置58。

  2. <details>
  3. <summary>英文:</summary>
  5. I&#39;d like to deploy the following policy to azure api management:
  7. ````xml
  8. &lt;policies&gt;
  9.     &lt;inbound&gt;
  10.     &lt;base /&gt;
  11.     &lt;choose&gt;
  12.         &lt;when condition=&quot;@(!context.Variables.ContainsKey(&#39;&#39;cachedAccessToken&#39;&#39;) || DateTime.UtcNow &gt;= (DateTime)context.Variables[&#39;&#39;tokenExpiry&#39;&#39;])&quot;&gt;
  13.             &lt;set-backend-service id=&quot;apim-generated-policy&quot; backend-id=&quot;{0}&quot; /&gt;
  14.             &lt;send-request mode=&quot;new&quot; response-variable-name=&quot;tokenResponse&quot; timeout=&quot;20&quot; ignore-error=&quot;false&quot;&gt;
  15.                 &lt;set-url&gt;{1}/token&lt;/set-url&gt;
  16.                 &lt;set-method&gt;POST&lt;/set-method&gt;
  17.                 &lt;set-header name=&quot;Content-Type&quot; exists-action=&quot;override&quot;&gt;
  18.                     &lt;value&gt;application/x-www-form-urlencoded&lt;/value&gt;
  19.                 &lt;/set-header&gt;
  20.                 &lt;set-body&gt;@(&quot;grant_type=password&amp;username={2}&amp;password=thisShouldRefThe-AmxPassword-NamedValue&quot;)&lt;/set-body&gt;
  21.             &lt;/send-request&gt;
  22.             &lt;set-variable name=&quot;tokenResponseJson&quot; value=&quot;@{{ return JsonConvert.DeserializeObject((string)context.Variables[&#39;&#39;tokenResponse&#39;&#39;].Body.As&lt;string&gt;()); }}&quot; /&gt;
  23.             &lt;set-variable name=&quot;cachedAccessToken&quot; value=&quot;@{{(string)context.Variables[&#39;&#39;tokenResponseJson&#39;&#39;][&#39;&#39;access_token&#39;&#39;]}}&quot; /&gt;
  24.             &lt;set-variable name=&quot;tokenExpiry&quot; value=&quot;@{{ return DateTime.UtcNow.AddSeconds((int)context.Variables[&#39;&#39;tokenResponseJson&#39;&#39;][&#39;&#39;expires_in&#39;&#39;] - 60); }}&quot; /&gt;
  25.             &lt;cache-store-value key=&quot;cachedAccessToken&quot; value=&quot;@{{context.Variables[&#39;&#39;cachedAccessToken&#39;&#39;]}}&quot; duration=&quot;@{{(new TimeSpan(0, (int)context.Variables[&#39;&#39;tokenResponseJson&#39;&#39;][&#39;&#39;expires_in&#39;&#39;], 0))}}&quot; /&gt;
  26.             &lt;cache-store-value key=&quot;tokenExpiry&quot; value=&quot;@{{context.Variables[&#39;&#39;tokenExpiry&#39;&#39;]}}&quot; duration=&quot;@{{(new TimeSpan(0, (int)context.Variables[&#39;&#39;tokenResponseJson&#39;&#39;][&#39;&#39;expires_in&#39;&#39;], 0))}}&quot; /&gt;
  27.         &lt;/when&gt;
  28.         &lt;otherwise&gt;
  29.             &lt;cache-lookup-value key=&quot;cachedAccessToken&quot; variable-name=&quot;cachedAccessToken&quot; /&gt;
  30.             &lt;cache-lookup-value key=&quot;tokenExpiry&quot; variable-name=&quot;tokenExpiry&quot; /&gt;
  31.         &lt;/otherwise&gt;
  32.     &lt;/choose&gt;
  33.     &lt;set-header name=&quot;Authorization&quot; exists-action=&quot;override&quot;&gt;
  34.         &lt;value&gt;@{{$&quot;Bearer {{context.Variables[&#39;&#39;cachedAccessToken&#39;&#39;]}}&quot;}}&lt;/value&gt;
  35.     &lt;/set-header&gt;
  36.     &lt;/inbound&gt;
  37.     &lt;backend&gt;
  38.         &lt;base /&gt;
  39.     &lt;/backend&gt;
  40.     &lt;outbound&gt;
  41.         &lt;base /&gt;
  42.     &lt;/outbound&gt;
  43.     &lt;on-error&gt;
  44.         &lt;base /&gt;
  45.     &lt;/on-error&gt;
  46. &lt;/policies&gt;

This is the bicep that gets run by a devops pipeline:

  1. resource apim &#39;Microsoft.ApiManagement/service@2022-04-01-preview&#39; existing = {
  2.     name: apimName
  4.     resource apiVersionSet &#39;api-version-sets@2018-06-01-preview&#39; = if (enableApiVersioning) {
  5.         name: apiName
  6.         properties: {
  7.             displayName: displayName
  8.             versioningScheme: versionScheme
  9.             versionHeaderName: &#39;X-Api-Version&#39;
  10.             versionQueryName: &#39;api-version&#39;
  11.         }
  12.     }
  14.     resource api &#39;apis&#39; = {
  15.         name: enableApiVersioning ? apiNameVersioned : apiName
  16.         properties: {
  17.             displayName: displayName
  18.             path: &#39;${pathPrefix}${apiName}&#39;
  19.             format: definitionFormat
  20.             protocols: [
  21.                 &#39;https&#39;
  22.             ]
  23.             subscriptionRequired: true
  24.             value: definition
  25.             apiVersion: enableApiVersioning ? version : null
  26.             apiVersionSetId: enableApiVersioning ? apiVersionSet.id : null
  27.             subscriptionKeyParameterNames: {
  28.                 header: &#39;Ocp-Apim-Subscription-Key&#39;
  29.                 query: &#39;subscription-key&#39;
  30.             }
  31.         }
  33.         resource apiPolicy &#39;policies&#39; = if (!empty(policy)) {
  34.             name: &#39;policy&#39;
  35.             properties: {
  36.                 value: policy
  37.             }
  38.         }
  39.     }
  40. }

I get the following error:

> '=' is an unexpected token. The expected token is ';'. Line 13, position 58.

答案1

得分: 1

以下是您要翻译的内容：

"Lesson learned - pay more attention to what chatgpt pumps out!

The main problem was the syntax for the C# code block. Here's the working policy:

  1. &lt;policies&gt;
  2.     &lt;inbound&gt;
  3.     &lt;base /&gt;
  4.     &lt;choose&gt;
  5.         &lt;when condition=&quot;@(!context.Variables.ContainsKey(&quot;cachedAccessToken&quot;) || DateTime.UtcNow &gt;= (DateTime)context.Variables[&quot;tokenExpiry&quot;])&quot;&gt;
  6.             &lt;set-backend-service id=&quot;apim-generated-policy&quot; backend-id=&quot;func-amx-api-dev-001&quot; /&gt;
  7.             &lt;send-request mode=&quot;new&quot; response-variable-name=&quot;tokenResponse&quot; timeout=&quot;20&quot; ignore-error=&quot;false&quot;&gt;
  8.                 &lt;set-url&gt;{{baseurl}}.azurewebsites.net/token&lt;/set-url&gt;
  9.                 &lt;set-method&gt;POST&lt;/set-method&gt;
  10.                 &lt;set-header name=&quot;Content-Type&quot; exists-action=&quot;override&quot;&gt;
  11.                     &lt;value&gt;application/x-www-form-urlencoded&lt;/value&gt;
  12.                 &lt;/set-header&gt;
  13.                 &lt;set-body&gt;@(&quot;grant_type=password&amp;username={{user}}&amp;password={{AmxPassword}}&quot;)&lt;/set-body&gt;
  14.             &lt;/send-request&gt;
  15.             &lt;set-variable name=&quot;cachedAccessToken&quot; value=&quot;@((String)((IResponse)context.Variables[&quot;jwt&quot;]).Body.As&lt;JObject&gt;()[&quot;access_token&quot;])&quot; /&gt;
  16.             &lt;set-variable name=&quot;tokenExpiry&quot; value=&quot;@((String)((IResponse)context.Variables[&quot;jwt&quot;]).Body.As&lt;JObject&gt;()[&quot;expires_in&quot;])&quot; /&gt;
  17.             &lt;cache-store-value key=&quot;cachedAccessToken&quot; value=&quot;@((String)context.Variables[&quot;cachedAccessToken&quot;])&quot; duration=&quot;3600&quot; caching-type=&quot;internal&quot; /&gt;
  18.             &lt;cache-store-value key=&quot;tokenExpiry&quot; value=&quot;@((String)context.Variables[&quot;tokenExpiry&quot;])&quot; duration=&quot;3600&quot; caching-type=&quot;internal&quot; /&gt;
  19.         &lt;/when&gt;
  20.         &lt;otherwise&gt;
  21.             &lt;cache-lookup-value key=&quot;cachedAccessToken&quot; variable-name=&quot;cachedAccessToken&quot; /&gt;
  22.             &lt;cache-lookup-value key=&quot;tokenExpiry&quot; variable-name=&quot;tokenExpiry&quot; /&gt;
  23.         &lt;/otherwise&gt;
  24.     &lt;/choose&gt;
  25.     &lt;set-header name=&quot;Authorization&quot; exists-action=&quot;override&quot;&gt;
  26.         &lt;value&gt;@{
  27.                 return $&quot;Bearer {(String)context.Variables[&quot;cachedAccessToken&quot;]}&quot;;
  28.             }&lt;/value&gt;
  29.     &lt;/set-header&gt;
  30.     &lt;/inbound&gt;
  31.     &lt;backend&gt;
  32.         &lt;base /&gt;
  33.     &lt;/backend&gt;
  34.     &lt;outbound&gt;
  35.         &lt;base /&gt;
  36.     &lt;/outbound&gt;
  37.     &lt;on-error&gt;
  38.         &lt;base /&gt;
  39.     &lt;/on-error&gt;
  40. &lt;/policies&gt;

I also moved the policy to a separate file and deployed at apim operation level with the following bicep:

  1. resource apiPolicy &#39;Microsoft.ApiManagement/service/apis/operations/policies@2022-09-01-preview&#39; = {
  2.     name: &#39;${apimName}/amxapi_v1_0_0/entity/policy&#39;
  3.     properties: {
  4.         value: loadTextContent(&#39;./createEntityPolicy.xml&#39;)
  5.     }
  6. }
英文:

Lesson learned - pay more attention to what chatgpt pumps out!

The main problem was the syntax for the C# code block. Here's the working policy:

  1. &lt;policies&gt;
  2.     &lt;inbound&gt;
  3.     &lt;base /&gt;
  4.     &lt;choose&gt;
  5.         &lt;when condition=&quot;@(!context.Variables.ContainsKey(&quot;cachedAccessToken&quot;) || DateTime.UtcNow &gt;= (DateTime)context.Variables[&quot;tokenExpiry&quot;])&quot;&gt;
  6.             &lt;set-backend-service id=&quot;apim-generated-policy&quot; backend-id=&quot;func-amx-api-dev-001&quot; /&gt;
  7.             &lt;send-request mode=&quot;new&quot; response-variable-name=&quot;tokenResponse&quot; timeout=&quot;20&quot; ignore-error=&quot;false&quot;&gt;
  8.                 &lt;set-url&gt;{{baseurl}}.azurewebsites.net/token&lt;/set-url&gt;
  9.                 &lt;set-method&gt;POST&lt;/set-method&gt;
  10.                 &lt;set-header name=&quot;Content-Type&quot; exists-action=&quot;override&quot;&gt;
  11.                     &lt;value&gt;application/x-www-form-urlencoded&lt;/value&gt;
  12.                 &lt;/set-header&gt;
  13.                 &lt;set-body&gt;@(&quot;grant_type=password&amp;username={{user}}&amp;password={{AmxPassword}}&quot;)&lt;/set-body&gt;
  14.             &lt;/send-request&gt;
  15.             &lt;set-variable name=&quot;cachedAccessToken&quot; value=&quot;@((String)((IResponse)context.Variables[&quot;jwt&quot;]).Body.As&lt;JObject&gt;()[&quot;access_token&quot;])&quot; /&gt;
  16.             &lt;set-variable name=&quot;tokenExpiry&quot; value=&quot;@((String)((IResponse)context.Variables[&quot;jwt&quot;]).Body.As&lt;JObject&gt;()[&quot;expires_in&quot;])&quot; /&gt;
  17.             &lt;cache-store-value key=&quot;cachedAccessToken&quot; value=&quot;@((String)context.Variables[&quot;cachedAccessToken&quot;])&quot; duration=&quot;3600&quot; caching-type=&quot;internal&quot; /&gt;
  18.             &lt;cache-store-value key=&quot;tokenExpiry&quot; value=&quot;@((String)context.Variables[&quot;tokenExpiry&quot;])&quot; duration=&quot;3600&quot; caching-type=&quot;internal&quot; /&gt;
  19.         &lt;/when&gt;
  20.         &lt;otherwise&gt;
  21.             &lt;cache-lookup-value key=&quot;cachedAccessToken&quot; variable-name=&quot;cachedAccessToken&quot; /&gt;
  22.             &lt;cache-lookup-value key=&quot;tokenExpiry&quot; variable-name=&quot;tokenExpiry&quot; /&gt;
  23.         &lt;/otherwise&gt;
  24.     &lt;/choose&gt;
  25.     &lt;set-header name=&quot;Authorization&quot; exists-action=&quot;override&quot;&gt;
  26.         &lt;value&gt;@{
  27.                 return $&quot;Bearer {(String)context.Variables[&quot;cachedAccessToken&quot;]}&quot;;
  28.             }&lt;/value&gt;
  29.     &lt;/set-header&gt;
  30.     &lt;/inbound&gt;
  31.     &lt;backend&gt;
  32.         &lt;base /&gt;
  33.     &lt;/backend&gt;
  34.     &lt;outbound&gt;
  35.         &lt;base /&gt;
  36.     &lt;/outbound&gt;
  37.     &lt;on-error&gt;
  38.         &lt;base /&gt;
  39.     &lt;/on-error&gt;
  40. &lt;/policies&gt;

I also moved the policy to a separate file and deployed at apim operation level with the following bicep:

  1. resource apiPolicy &#39;Microsoft.ApiManagement/service/apis/operations/policies@2022-09-01-preview&#39; = {
  2.     name: &#39;${apimName}/amxapi_v1_0_0/entity/policy&#39;
  3.     properties: {
  4.         value: loadTextContent(&#39;./createEntityPolicy.xml&#39;)
  5.     }
  6. }

huangapple
  • 本文由 发表于 2023年5月6日 22:54:32
  • 转载请务必保留本文链接：https://go.coder-hub.com/76189545.html
  • azure-api-management
  • azure-bicep
  • azure-resource-manager
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定