Azure Key Vault错误消息 “AKV10000: 请求缺少Bearer或PoP令牌。”

huangapple
go评论108阅读模式
英文:

Azure Key Vault error message "AKV10000: Request is missing a Bearer or PoP token."

问题

我在Azure上有一个密钥保管库，并为应用程序注册添加了访问策略，具有秘密权限（获取、列出、设置、删除、恢复、备份、还原）。
我编写了Java代码：

  1. String keyVaultUri = "https://myKeyVault.azure.net";
  3. ClientSecretCredential paramClientSecretCredential = new ClientSecretCredentialBuilder()
  4.         .clientId("MyApplicationId")
  5.         .clientSecret("MyApplicationSecretKey")
  6.         .tenantId("MyTenantId")
  7.         .build();
  9. SecretClient secretClient = new SecretClientBuilder()
  10.     .vaultUrl(keyVaultUri)
  11.     .credential(paramClientSecretCredential)
  12.     .httpLogOptions(new HttpLogOptions().setLogLevel(HttpLogDetailLevel.BODY_AND_HEADERS))
  13.     .buildClient();
  15. KeyVaultSecret storedSecret = secretClient.getSecret("mySecret");
  17. System.out.println("Secret value: " + storedSecret.getValue());

我使用以下Maven依赖项：

  1. azure-security-keyvault-secretss（版本4.6.2）
  2. azure-core（版本1.39.0）
  3. azure-identity（版本1.9.0-beta.1）

在我启动代码后，我收到了以下错误消息：状态码401，“{"error":{"code":"Unauthorized","message":"AKV10000: Request is missing a Bearer or PoP token."}}”

您有关于如何修复这个问题的建议吗？

英文:

I have Key Vault on Azure and I added Access policies for App registrations with Secret permissions (Get, List, Set, Delete, Recover, Backup, Restore)
I wrote Java code:

  1.     String keyVaultUri = "https://myKeyVault.azure.net";
  3.     ClientSecretCredential paramClientSecretCredential = new ClientSecretCredentialBuilder()
  4.             .clientId("MyApplicationId")
  5.             .clientSecret("MyApplicationSecretKey")
  6.             .tenantId("MyTenantId")
  7.             .build();
  9.      SecretClient secretClient = new SecretClientBuilder()
  10.         .vaultUrl(keyVaultUri)
  11.         .credential(paramClientSecretCredential)
  12.         .httpLogOptions(new HttpLogOptions().setLogLevel(HttpLogDetailLevel.BODY_AND_HEADERS))
  13.         .buildClient();
  15.      KeyVaultSecret storedSecret = secretClient.getSecret("mySecret");
  17.      System.out.println("Secret value: "+storedSecret.getValue());

I'm using these Maven dependencies:

  1. azure-security-keyvault-secretss (version 4.6.2)
  2. azure-core (version 1.39.0)
  3. azure-identity (version 1.9.0-beta.1)

After I started my code I got this error message Status code 401, "{"error":{"code":"Unauthorized","message":"AKV10000: Request is missing a Bearer or PoP token."}}"

Do you have any suggestions on how to fix this?

答案1

得分: 0

我对您的代码进行了一些更改，成功获取了我的密钥保管库的密钥。

代码:

  1. import com.azure.identity.ClientSecretCredential;
  2. import com.azure.identity.ClientSecretCredentialBuilder;
  3. import com.azure.security.keyvault.secrets.SecretClient;
  4. import com.azure.security.keyvault.secrets.SecretClientBuilder;
  5. import com.azure.security.keyvault.secrets.models.KeyVaultSecret;
  7. public class KeyVaultKam {
  8.     public static void main(String[] args) {
  9.         String keyVaultUri = "https://<keyvault-name>.vault.azure.net/";
  10.         String secretName = "<secrete-name>";
  12.         ClientSecretCredential credential = new ClientSecretCredentialBuilder()
  13.                 .clientId("<client-ID>")
  14.                 .clientSecret("<client-secrete>")
  15.                 .tenantId("<tenant-ID>")
  16.                 .build();
  18.         SecretClient secretClient = new SecretClientBuilder()
  19.                 .vaultUrl(keyVaultUri)
  20.                 .credential(credential)
  21.                 .buildClient();
  23.         try {
  24.             KeyVaultSecret secret = secretClient.getSecret(secretName);
  25.             System.out.println("Secret value: " + secret.getValue());
  26.         } catch (Exception e) {
  27.             System.out.println("Error retrieving secret: " + e.getMessage());
  28.         }
  29.     }
  30. }

pom.xml:

我向pom.xml文件添加了以下依赖项：

  1. <dependencies>
  2.     <dependency>
  3.         <groupId>com.azure</groupId>
  4.         <artifactId>azure-security-keyvault-secrets</artifactId>
  5.         <version>4.6.2</version>
  6.     </dependency>
  8.     <dependency>
  9.         <groupId>com.azure</groupId>
  10.         <artifactId>azure-core</artifactId>
  11.         <version>1.39.0</version>
  12.     </dependency>
  14.     <dependency>
  15.         <groupId>com.azure</groupId>
  16.         <artifactId>azure-identity</artifactId>
  17.         <version>1.4.0</version>
  18.     </dependency>
  19. </dependencies>

我为客户端应用程序创建了如下的访问策略，

Azure Key Vault错误消息 “AKV10000: 请求缺少Bearer或PoP令牌。”

输出:

它成功运行并且获取了我的密钥输出如下，

Azure Key Vault错误消息 “AKV10000: 请求缺少Bearer或PoP令牌。”

英文:

I made some changes with your code and I got the secrete of my key vault at output.

Code:

  1. import com.azure.identity.ClientSecretCredential;
  2. import com.azure.identity.ClientSecretCredentialBuilder;
  3. import com.azure.security.keyvault.secrets.SecretClient;
  4. import com.azure.security.keyvault.secrets.SecretClientBuilder;
  5. import com.azure.security.keyvault.secrets.models.KeyVaultSecret;
  7. public class KeyVaultKam {
  8.     public static void main(String[] args) {
  9.         String keyVaultUri = &quot;https://&lt;keyvault-name&gt;.vault.azure.net/&quot;;
  10.         String secretName = &quot;&lt;secrete-name&gt;&quot;;
  12.         ClientSecretCredential credential = new ClientSecretCredentialBuilder()
  13.                 .clientId(&quot;&lt;client-ID&gt;&quot;)
  14.                 .clientSecret(&quot;&lt;client-secrete&gt;&quot;)
  15.                 .tenantId(&quot;&lt;tenant-ID&gt;&quot;)
  16.                 .build();
  18.         SecretClient secretClient = new SecretClientBuilder()
  19.                 .vaultUrl(keyVaultUri)
  20.                 .credential(credential)
  21.                 .buildClient();
  23.         try {
  24.             KeyVaultSecret secret = secretClient.getSecret(secretName);
  25.             System.out.println(&quot;Secret value: &quot; + secret.getValue());
  26.         } catch (Exception e) {
  27.             System.out.println(&quot;Error retrieving secret: &quot; + e.getMessage());
  28.         }
  29.     }
  30. }

pom.xml:

I added below dependencies to the pom.xml file,

  1. &lt;dependencies&gt;
  2.      
  3.         &lt;dependency&gt;
  4.             &lt;groupId&gt;com.azure&lt;/groupId&gt;
  5.             &lt;artifactId&gt;azure-security-keyvault-secrets&lt;/artifactId&gt;
  6.             &lt;version&gt;4.6.2&lt;/version&gt;
  7.         &lt;/dependency&gt;
  8.         
  9.         &lt;dependency&gt;
  10.             &lt;groupId&gt;com.azure&lt;/groupId&gt;
  11.             &lt;artifactId&gt;azure-core&lt;/artifactId&gt;
  12.             &lt;version&gt;1.39.0&lt;/version&gt;
  13.         &lt;/dependency&gt;
  14.         
  15.         &lt;dependency&gt;
  16.             &lt;groupId&gt;com.azure&lt;/groupId&gt;
  17.             &lt;artifactId&gt;azure-identity&lt;/artifactId&gt;
  18.             &lt;version&gt;1.4.0&lt;/version&gt;
  19.         &lt;/dependency&gt;
  20.         
  21. &lt;/dependencies&gt;

I created access policy for the client application as below,

Azure Key Vault错误消息 “AKV10000: 请求缺少Bearer或PoP令牌。”

Output:

It runs successfully and got the output of my secrete as below,

Azure Key Vault错误消息 “AKV10000: 请求缺少Bearer或PoP令牌。”

huangapple
  • 本文由 发表于 2023年6月13日 18:29:10
  • 转载请务必保留本文链接：https://go.coder-hub.com/76463957.html
  • azure
  • azure-keyvault
  • java
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定