(PureBasic) Azure Key Vault - Get a JSON Secret

See more Secrets Examples

Demonstrates how to fetch the content of a JSON secret from the Azure Key Vault.

Note: This example requires Chilkat v10.1.0 or later.

For more information, see https://cknotes.com/chilkat-secrets-class-added-in-version-10-1-0/

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkJsonObject.pb"
IncludeFile "CkSecrets.pb"

Procedure ChilkatExample()

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; The bootstrap secret will contain the following information:

    ; Azure Tenant ID
    ; Azure Client ID
    ; Azure Client Secret

    ; See following examples for setting up a bootstrap secret in memory, 
    ; or in the local manager (Windows Credentials Manager or Apple Keychain)
    ; Setup Bootstrap Secret in Local Manager
    ; Setup Bootstrap Secret in Memory
    bootstrap.i = CkSecrets::ckCreate()
    If bootstrap.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Set the location of the bootstrap secret.
    ; Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
    ; ---------------------------------------------------------------------------------------------
    ; If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
    ; You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
    ; ---------------------------------------------------------------------------------------------
    CkSecrets::setCkLocation(bootstrap, "local_manager")

    ; Specify the bootstrap secret to be used.
    bsId.i = CkJsonObject::ckCreate()
    If bsId.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(bsId,"appName","azure_bs")
    CkJsonObject::ckUpdateString(bsId,"service","Example")
    CkJsonObject::ckUpdateString(bsId,"username","Joe")

    ; ----------------------------------------------------
    secrets.i = CkSecrets::ckCreate()
    If secrets.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Setup for the Azure Key Vault
    CkSecrets::setCkLocation(secrets, "azure_key_vault")
    success.i = CkSecrets::ckSetBootstrapSecret(secrets,bsId,bootstrap)
    If success = 0
        Debug CkSecrets::ckLastErrorText(secrets)
        CkSecrets::ckDispose(bootstrap)
        CkJsonObject::ckDispose(bsId)
        CkSecrets::ckDispose(secrets)
        ProcedureReturn
    EndIf

    ; Specify the secret to be fetched.
    json.i = CkJsonObject::ckCreate()
    If json.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(json,"appName","MyApp")
    CkJsonObject::ckUpdateString(json,"service","OAuth2")
    CkJsonObject::ckUpdateString(json,"domain","onedrive")
    CkJsonObject::ckUpdateString(json,"username","matt")

    ; For Azure Key Vault, we also need to specify the name of the vault where the secret is located.
    ; Replace "kvChilkat" with the name of your key vault.
    CkJsonObject::ckUpdateString(json,"vaultName","kvChilkat")

    ; Get the secret.
    jsonSecret.i = CkJsonObject::ckCreate()
    If jsonSecret.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkSecrets::ckGetSecretJson(secrets,json,jsonSecret)
    If success = 0
        Debug CkSecrets::ckLastErrorText(secrets)
        CkSecrets::ckDispose(bootstrap)
        CkJsonObject::ckDispose(bsId)
        CkSecrets::ckDispose(secrets)
        CkJsonObject::ckDispose(json)
        CkJsonObject::ckDispose(jsonSecret)
        ProcedureReturn
    EndIf

    CkJsonObject::setCkEmitCompact(jsonSecret, 0)
    Debug CkJsonObject::ckEmit(jsonSecret)
    Debug "Success."


    CkSecrets::ckDispose(bootstrap)
    CkJsonObject::ckDispose(bsId)
    CkSecrets::ckDispose(secrets)
    CkJsonObject::ckDispose(json)
    CkJsonObject::ckDispose(jsonSecret)


    ProcedureReturn
EndProcedure