awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-04 07:26:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix azure client secrets OAuth URL to use graph instead of vault

Browse Source
This commit is contained in:
Carlos Monastyrski
2025-07-25 20:47:17 -03:00
parent c68138ac21
commit 0adf2c830d
2 changed files with 3 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/integrations/app-connections/azure-client-secrets.mdx
+2 -16
View File
@@ -43,12 +43,6 @@ Infisical currently only supports one method for connecting to Azure, which is O
- `Application.ReadWrite.All` (Delegated) - `Application.ReadWrite.All` (Delegated)
- `Directory.ReadWrite.All` (Delegated) - `Directory.ReadWrite.All` (Delegated)
- `User.Read` (Delegated) - `User.Read` (Delegated)
- Azure App Configuration
- `KeyValue.Delete` (Delegated)
- `KeyValue.Read` (Delegated)
- `KeyValue.Write` (Delegated)
- Access Key Vault
- `user_impersonation` (Delegated)
![Azure client secrets](/images/integrations/azure-client-secrets/app-api-permissions.png) ![Azure client secrets](/images/integrations/azure-client-secrets/app-api-permissions.png)
@@ -63,8 +57,8 @@ Infisical currently only supports one method for connecting to Azure, which is O
Back in your Infisical instance, add two new environment variables for the credentials of your Azure application. Back in your Infisical instance, add two new environment variables for the credentials of your Azure application.
- `INF_APP_CONNECTION_AZURE_CLIENT_ID`: The **Application (Client) ID** of your Azure application. - `INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_ID`: The **Application (Client) ID** of your Azure application.
- `INF_APP_CONNECTION_AZURE_CLIENT_SECRET`: The **Client Secret** of your Azure application. - `INF_APP_CONNECTION_AZURE_CLIENT_SECRETS_CLIENT_SECRET`: The **Client Secret** of your Azure application.
Once added, restart your Infisical instance and use the Azure Client Secrets connection. Once added, restart your Infisical instance and use the Azure Client Secrets connection.
</Step> </Step>
@@ -91,14 +85,6 @@ Infisical currently only supports one method for connecting to Azure, which is O
- `Directory.ReadWrite.All` (Delegated) - `Directory.ReadWrite.All` (Delegated)
- `User.Read` (Delegated) - `User.Read` (Delegated)
**Azure App Configuration**
- `KeyValue.Delete` (Delegated)
- `KeyValue.Read` (Delegated)
- `KeyValue.Write` (Delegated)
**Access Key Vault**
- `user_impersonation` (Delegated)
![Azure client secrets](/images/integrations/azure-client-secrets/app-api-permissions.png) ![Azure client secrets](/images/integrations/azure-client-secrets/app-api-permissions.png)
</Step> </Step>
</Steps> </Steps>
frontend/src/pages/organization/AppConnections/AppConnectionsPage/components/AppConnectionForm/AzureClientSecretsConnectionForm.tsx
+1 -1
View File
@@ -132,7 +132,7 @@ export const AzureClientSecretsConnectionForm = ({ appConnection, onSubmit }: Pr
JSON.stringify({ ...formData, connectionId: appConnection?.id }) JSON.stringify({ ...formData, connectionId: appConnection?.id })
); );
window.location.assign( window.location.assign(
`https://login.microsoftonline.com/${formData.tenantId || "common"}/oauth2/v2.0/authorize?client_id=${oauthClientId}&response_type=code&redirect_uri=${window.location.origin}/organization/app-connections/azure/oauth/callback&response_mode=query&scope=https://azconfig.io/.default%20openid%20offline_access&state=${state}<:>azure-client-secrets` `https://login.microsoftonline.com/${formData.tenantId || "common"}/oauth2/v2.0/authorize?client_id=${oauthClientId}&response_type=code&redirect_uri=${window.location.origin}/organization/app-connections/azure/oauth/callback&response_mode=query&scope=https://graph.microsoft.com/.default%20openid%20offline_access&state=${state}<:>azure-client-secrets`
); );
break; break;