(Objective-C) Azure Key Vault - Get a Binary Secret

See more Secrets Examples

Demonstrates how to fetch the content of a binary secret from the Azure Key Vault.

Note: This example requires Chilkat v10.1.0 or later.

For more information, see https://cknotes.com/chilkat-secrets-class-added-in-version-10-1-0/

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoSecrets.h>
#import <CkoJsonObject.h>
#import <CkoBinData.h>

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// The bootstrap secret will contain the following information:

// Azure Tenant ID
// Azure Client ID
// Azure Client Secret

// See following examples for setting up a bootstrap secret in memory, 
// or in the local manager (Windows Credentials Manager or Apple Keychain)
// Setup Bootstrap Secret in Local Manager
// Setup Bootstrap Secret in Memory
CkoSecrets *bootstrap = [[CkoSecrets alloc] init];

// Set the location of the bootstrap secret.
// Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
// ---------------------------------------------------------------------------------------------
// If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
// You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
// ---------------------------------------------------------------------------------------------
bootstrap.Location = @"local_manager";

// Specify the bootstrap secret to be used.
CkoJsonObject *bsId = [[CkoJsonObject alloc] init];
[bsId UpdateString: @"appName" value: @"azure_bs"];
[bsId UpdateString: @"service" value: @"Example"];
[bsId UpdateString: @"username" value: @"Joe"];

// ----------------------------------------------------
CkoSecrets *secrets = [[CkoSecrets alloc] init];

secrets.Location = @"azure_key_vault";
BOOL success = [secrets SetBootstrapSecret: bsId secrets: bootstrap];
if (success == NO) {
    NSLog(@"%@",secrets.LastErrorText);
    return;
}

// Specify the secret to be fetched.
CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json UpdateString: @"appName" value: @"Test2"];
[json UpdateString: @"service" value: @"Custom"];
[json UpdateString: @"domain" value: @"Ocean"];
[json UpdateString: @"username" value: @"Starfish"];

// For Azure Key Vault, we also need to specify the name of the vault where the secret is located.
// Replace "kvChilkat" with the name of your key vault.
[json UpdateString: @"vaultName" value: @"kvChilkat"];

// Get the binary secret data.
CkoBinData *bd = [[CkoBinData alloc] init];
success = [secrets GetSecretBd: json bd: bd];
if (success == NO) {
    NSLog(@"%@",secrets.LastErrorText);
    return;
}

// For our testing, the binary secret was a JPG image..
[bd WriteFile: @"c:/temp/qa_output/starfish.jpg"];

NSLog(@"%@",@"Success.");