4a5f1234bb
* chore: upgrade maintenance scripts to robust PyYAML parsing - Replaces fragile regex frontmatter parsing with PyYAML/yaml library - Ensures multi-line descriptions and complex characters are handled safely - Normalizes quoting and field ordering across all maintenance scripts - Updates validator to strictly enforce description quality * fix: restore and refine truncated skill descriptions - Recovered 223+ truncated descriptions from git history (6.5.0 regression) - Refined long descriptions into concise, complete sentences (<200 chars) - Added missing descriptions for brainstorming and orchestration skills - Manually fixed imagen skill description - Resolved dangling links in competitor-alternatives skill * chore: sync generated registry files and document fixes - Regenerated skills index with normalized forward-slash paths - Updated README and CATALOG to reflect restored descriptions - Documented restoration and script improvements in CHANGELOG.md * fix: restore missing skill and align metadata for full 955 count - Renamed SKILL.MD to SKILL.md in andruia-skill-smith to ensure indexing - Fixed risk level and missing section in andruia-skill-smith - Synchronized all registry files for final 955 skill count * chore(scripts): add cross-platform runners and hermetic test orchestration * fix(scripts): harden utf-8 output and clone target writeability * fix(skills): add missing date metadata for strict validation * chore(index): sync generated metadata dates * fix(catalog): normalize skill paths to prevent CI drift * chore: sync generated registry files * fix: enforce LF line endings for generated registry files
119 lines
3.4 KiB
Markdown
119 lines
3.4 KiB
Markdown
---
|
|
name: azure-identity-rust
|
|
description: Azure Identity SDK for Rust authentication. Use for DeveloperToolsCredential, ManagedIdentityCredential, ClientSecretCredential, and token-based authentication.
|
|
risk: unknown
|
|
source: community
|
|
date_added: '2026-02-27'
|
|
---
|
|
|
|
# Azure Identity SDK for Rust
|
|
|
|
Authentication library for Azure SDK clients using Microsoft Entra ID (formerly Azure AD).
|
|
|
|
## Installation
|
|
|
|
```sh
|
|
cargo add azure_identity
|
|
```
|
|
|
|
## Environment Variables
|
|
|
|
```bash
|
|
# Service Principal (for production/CI)
|
|
AZURE_TENANT_ID=<your-tenant-id>
|
|
AZURE_CLIENT_ID=<your-client-id>
|
|
AZURE_CLIENT_SECRET=<your-client-secret>
|
|
|
|
# User-assigned Managed Identity (optional)
|
|
AZURE_CLIENT_ID=<managed-identity-client-id>
|
|
```
|
|
|
|
## DeveloperToolsCredential
|
|
|
|
The recommended credential for local development. Tries developer tools in order (Azure CLI, Azure Developer CLI):
|
|
|
|
```rust
|
|
use azure_identity::DeveloperToolsCredential;
|
|
use azure_security_keyvault_secrets::SecretClient;
|
|
|
|
let credential = DeveloperToolsCredential::new(None)?;
|
|
let client = SecretClient::new(
|
|
"https://my-vault.vault.azure.net/",
|
|
credential.clone(),
|
|
None,
|
|
)?;
|
|
```
|
|
|
|
### Credential Chain Order
|
|
|
|
| Order | Credential | Environment |
|
|
|-------|-----------|-------------|
|
|
| 1 | AzureCliCredential | `az login` |
|
|
| 2 | AzureDeveloperCliCredential | `azd auth login` |
|
|
|
|
## Credential Types
|
|
|
|
| Credential | Usage |
|
|
|------------|-------|
|
|
| `DeveloperToolsCredential` | Local development - tries CLI tools |
|
|
| `ManagedIdentityCredential` | Azure VMs, App Service, Functions, AKS |
|
|
| `WorkloadIdentityCredential` | Kubernetes workload identity |
|
|
| `ClientSecretCredential` | Service principal with secret |
|
|
| `ClientCertificateCredential` | Service principal with certificate |
|
|
| `AzureCliCredential` | Direct Azure CLI auth |
|
|
| `AzureDeveloperCliCredential` | Direct azd CLI auth |
|
|
| `AzurePipelinesCredential` | Azure Pipelines service connection |
|
|
| `ClientAssertionCredential` | Custom assertions (federated identity) |
|
|
|
|
## ManagedIdentityCredential
|
|
|
|
For Azure-hosted resources:
|
|
|
|
```rust
|
|
use azure_identity::ManagedIdentityCredential;
|
|
|
|
// System-assigned managed identity
|
|
let credential = ManagedIdentityCredential::new(None)?;
|
|
|
|
// User-assigned managed identity
|
|
let options = ManagedIdentityCredentialOptions {
|
|
client_id: Some("<user-assigned-mi-client-id>".into()),
|
|
..Default::default()
|
|
};
|
|
let credential = ManagedIdentityCredential::new(Some(options))?;
|
|
```
|
|
|
|
## ClientSecretCredential
|
|
|
|
For service principal with secret:
|
|
|
|
```rust
|
|
use azure_identity::ClientSecretCredential;
|
|
|
|
let credential = ClientSecretCredential::new(
|
|
"<tenant-id>".into(),
|
|
"<client-id>".into(),
|
|
"<client-secret>".into(),
|
|
None,
|
|
)?;
|
|
```
|
|
|
|
## Best Practices
|
|
|
|
1. **Use `DeveloperToolsCredential` for local dev** — automatically picks up Azure CLI
|
|
2. **Use `ManagedIdentityCredential` in production** — no secrets to manage
|
|
3. **Clone credentials** — credentials are `Arc`-wrapped and cheap to clone
|
|
4. **Reuse credential instances** — same credential can be used with multiple clients
|
|
5. **Use `tokio` feature** — `cargo add azure_identity --features tokio`
|
|
|
|
## Reference Links
|
|
|
|
| Resource | Link |
|
|
|----------|------|
|
|
| API Reference | https://docs.rs/azure_identity |
|
|
| Source Code | https://github.com/Azure/azure-sdk-for-rust/tree/main/sdk/identity/azure_identity |
|
|
| crates.io | https://crates.io/crates/azure_identity |
|
|
|
|
## When to Use
|
|
This skill is applicable to execute the workflow or actions described in the overview.
|