/// <summary>
/// Fetches a certificate from a KeyVault, using an Actve Directory client and secret.
/// </summary>
/// <param name="clientAssertionCertificate">Required Ad certificate.</param>
/// <param name="keyVaultBaseUri">Required KeyStore Uri.</param>
/// <param name="certifcateName">Required certificate name.</param>
/// <param name="cancellationToken">Optional</param>
/// <returns>Not null.</returns>
public static async Task <CertificateBundle> GetCertificate(
ClientAssertionCertificate clientAssertionCertificate,
string keyVaultBaseUri,
string certifcateName,
CancellationToken cancellationToken = default)
{
using (ClientAssertionCertificateAccessTokenHandler tokenHandler
= new ClientAssertionCertificateAccessTokenHandler(clientAssertionCertificate)) {
return(await new KeyVaultClient(tokenHandler.GetToken).GetCertificateAsync(
keyVaultBaseUri,
certifcateName,
cancellationToken));
}
}
/// <summary>
/// Fetches a certificate from a KeyVault, using an Actve Directory client and secret.
/// </summary>
/// <param name="clientAssertionCertificate">Required Ad certificate.</param>
/// <param name="vaultBaseUri">Required KeyStore Uri.</param>
/// <param name="secretName">Required certificate name.</param>
/// <param name="cancellationToken">Optional</param>
/// <returns>Not null.</returns>
public static async Task <SecretBundle> GetSecret(
ClientAssertionCertificate clientAssertionCertificate,
string vaultBaseUri,
string secretName,
CancellationToken cancellationToken = default)
{
using (ClientAssertionCertificateAccessTokenHandler tokenHandler
= new ClientAssertionCertificateAccessTokenHandler(clientAssertionCertificate)) {
return(await new KeyVaultClient(tokenHandler.GetToken).GetSecretAsync(
vaultBaseUri,
secretName,
cancellationToken));
}
}
