目前，我在啟動期間使用 Azure KeyVault 來加載一些配置，如下所示：configBuilder .AddAzureKeyVault(keyVaultConfigSection.Vault, GetKeyVaultClient(clientConfigSection, keyVaultConfigSection), new DefaultKeyVaultSecretManager()) .AddEnvironmentVariables();private static KeyVaultClient GetKeyVaultClient(ClientConfigSection clientConfigSection, KeyVaultConfigSection keyVaultConfigSection){ HttpClient httpClient = null; //proxy if (!CustomEnvironment.NotProductionEnvironment()) { var handler = new HttpClientHandler() { Proxy = new WebProxy(keyVaultConfigSection.Proxy), UseProxy = true }; httpClient = new HttpClient(handler); } return new KeyVaultClient(async (authority, resource, scope) => { var authContext = new AuthenticationContext(authority); var clientCred = new ClientCredential(clientConfigSection.ClientId, clientConfigSection.ClientSecret); var result = await authContext.AcquireTokenAsync(resource, clientCred); if (result == null) throw new InvalidOperationException("Failed to retrieve access token for Key Vault"); return result.AccessToken; }, httpClient ?? new HttpClient() );}當我不在生產環境中時，這工作得很好。但在我們的生產環境中，keyvault 被阻止，因此我們必須通過代理。但是當運行代碼時我得到這個錯誤：Microsoft.Azure.KeyVault.Models.KeyVaultErrorException: 'Operation returned an invalid status code 'BadRequest''以前有人這樣做過并且可以指出我正確的方向嗎？
1 回答
慕的地10843
TA貢獻1785條經驗 獲得超8個贊
似乎還沒有修復，解決方法如下。
1.引用System.Net.Http.WinHttpHandlerNuget包來訪問.NET Core中的WinHttpHandler。
2.創建一個新的MyKeyVaultCredential，繼承自KeyVaultCredential并重寫ProcessHttpRequestAsync方法
public override async Task ProcessHttpRequestAsync(HttpRequestMessage request, CancellationToken cancellationToken)
?{
? ? ?if (request == null)
? ? ?{
? ? ? ? ?throw new ArgumentNullException("request");
? ? ?}
? ? ?var accessToken = await PreAuthenticate(request.RequestUri).ConfigureAwait(false);
? ? ?if (!string.IsNullOrEmpty(accessToken))
? ? ? ? ?request.Headers.Authorization = new AuthenticationHeaderValue("Bearer", accessToken);
? ? ?else
? ? ?{
? ? ? ? ?var httpClientHandler = new WinHttpHandler()
? ? ? ? ?{
? ? ? ? ? ? ?WindowsProxyUsePolicy = WindowsProxyUsePolicy.UseCustomProxy,
? ? ? ? ? ? ?Proxy = new MyWebProxy(configuration),
? ? ? ? ? ? ?SendTimeout = TimeSpan.FromSeconds(120),
? ? ? ? ? ? ?ReceiveDataTimeout = TimeSpan.FromSeconds(120),
? ? ? ? ? ? ?ReceiveHeadersTimeout = TimeSpan.FromSeconds(120),
? ? ? ? ?};
3.當我實例化 KeyVaultService 時，我必須向 WinHttpHandler 提供我的代理和新的密鑰保管庫憑據實例。
var httpClientHandler = new WinHttpHandler()
? ? ?{
? ? ? ? ?WindowsProxyUsePolicy = WindowsProxyUsePolicy.UseCustomProxy,
? ? ? ? ?Proxy = new MyWebProxy(configuration),
? ? ? ? ?SendTimeout = TimeSpan.FromSeconds(120),
? ? ? ? ?ReceiveDataTimeout = TimeSpan.FromSeconds(120),
? ? ? ? ?ReceiveHeadersTimeout= TimeSpan.FromSeconds(120),
? ? ?};
? ? ?var httpClient = new HttpClient(httpClientHandler);
? ? ?client = new KeyVaultClient(new? MyKeyVaultCredential(configuration, GetToken), httpClient)
希望這可以幫助。
- 1 回答
- 0 關注
- 93 瀏覽
添加回答
舉報
0/150
提交
取消