AutoIt

Azure Key Vault - List Matching Secrets

See more Secrets Examples

List secrets in the Azure Key Vault matching one or more wildcarded names for app, service, domain, and username.

Note: This example requires Chilkat v10.1.0 or later.

AutoIt

Local $bSuccess = False

; This example requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; The bootstrap secret will contain the following information:

; Azure Tenant ID
; Azure Client ID
; Azure Client Secret

; See following examples for setting up a bootstrap secret in memory, 
; or in the local manager (Windows Credentials Manager or Apple Keychain)
; Setup Bootstrap Secret in Local Manager
; Setup Bootstrap Secret in Memory
$oBootstrap = ObjCreate("Chilkat.Secrets")

; Set the location of the bootstrap secret.
; Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
; ---------------------------------------------------------------------------------------------
; If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
; You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
; ---------------------------------------------------------------------------------------------
$oBootstrap.Location = "local_manager"

; Specify the bootstrap secret to be used.
$oBsId = ObjCreate("Chilkat.JsonObject")
$oBsId.UpdateString("appName","azure_bs")
$oBsId.UpdateString("service","Example")
$oBsId.UpdateString("username","Joe")

; ----------------------------------------------------
$oSecrets = ObjCreate("Chilkat.Secrets")

; Setup for the Azure Key Vault
$oSecrets.Location = "azure_key_vault"
$bSuccess = $oSecrets.SetBootstrapSecret($oBsId,$oBootstrap)
If ($bSuccess = False) Then
    ConsoleWrite($oSecrets.LastErrorText & @CRLF)
    Exit
EndIf

; Set wildcarded or exact values for appName, service, domain, and username.
; Omit any members where anything is allowed to match, or alternatively specify "*" to match anything.
$oJsonMatch = ObjCreate("Chilkat.JsonObject")
$oJsonMatch.UpdateString("appName","Test*")
; The following lines can be omitted. Not specifying anything for service, domain, or username is the same as "*".
$oJsonMatch.UpdateString("service","*")
$oJsonMatch.UpdateString("domain","*")
$oJsonMatch.UpdateString("username","*")

; For Azure Key Vault, we also need to specify the name of the vault containing the secrets to be listed.
; Replace "kvChilkat" with the name of your key vault.
$oJsonMatch.UpdateString("vaultName","kvChilkat")

$oResults = ObjCreate("Chilkat.JsonObject")
$oResults.EmitCompact = False

$bSuccess = $oSecrets.ListSecrets($oJsonMatch,$oResults)
If ($bSuccess = False) Then
    ConsoleWrite($oSecrets.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite($oResults.Emit() & @CRLF)

; Sample output:

; {
;   "secrets": [
;     {
;       "appName": "Test",
;       "service": "Something",
;       "domain": "Xyz",
;       "username": "Abc",
;       "azure_id": "https://kvchilkat.vault.azure.net/secrets/Test-Something-Xyz-Abc"
;     },
;     {
;       "appName": "Test2",
;       "service": "Custom",
;       "domain": "Ocean",
;       "username": "Starfish",
;       "azure_id": "https://kvchilkat.vault.azure.net/secrets/Test2-Custom-Ocean-Starfish"
;     }
;   ]
; }

; ---------------------------------------------------------------------------------------
; Here's sample code for parsing the JSON list of secrets.

Local $sAppName
Local $service
Local $sDomain
Local $sUsername
Local $sAzure_id

Local $i = 0
Local $iNumSecrets = $oResults.SizeOfArray("secrets")
While $i < $iNumSecrets
    $oResults.I = $i
    ; Note: appName and domain are optional and may not exist in any given secret.
    $sAppName = $oResults.StringOf("secrets[i].appName")
    $service = $oResults.StringOf("secrets[i].service")
    $sDomain = $oResults.StringOf("secrets[i].domain")
    $sUsername = $oResults.StringOf("secrets[i].username")
    ; Informational field for the raw Azure secret name.
    $sAzure_id = $oResults.StringOf("secrets[i].azure_id")
    $i = $i + 1
Wend