Support Workload Identity

README.md

@@ -18,6 +18,8 @@ npm install --save ffc-messaging
 
 `useCredentialChain` - Boolean value for whether to authenticate connection with using Azure's credential chain.  For example, set this to true if you wish to use [AAD Pod Identity](https://github.com/Azure/aad-pod-identity).  If `false`, then `username` and `password` or `connectionString` are required.
 
+`managedIdentityClientId` - Client Id of the Workload Identity.  Required if using Workload Identity instead of Pod Identity or connection string.
+
 `connectionString` - Azure Service Bus connection string.  If provided, `username` and `password` are ignored.
 
 `username` - Azure Service Bus Shared Access Key name for authentication.  Not required if `useCredentialChain` is `true` or `connectionString` is provided.

app/messaging/admin-client.js

@@ -21,7 +21,11 @@ class AdminClient {
   }
 
   getCredentials () {
-    return new DefaultAzureCredential()
+    if (this.config.managedIdentityClientId) {
+      return new DefaultAzureCredential({ managedIdentityClientId: this.config.managedIdentityClientId })
+    } else {
+      return new DefaultAzureCredential()
+    }
   }
 
   async getClient () {

app/messaging/message-base.js

@@ -21,7 +21,11 @@ class MessageBase {
   }
 
   getCredentials () {
-    return new DefaultAzureCredential()
+    if (this.config.managedIdentityClientId) {
+      return new DefaultAzureCredential({ managedIdentityClientId: this.config.managedIdentityClientId })
+    } else {
+      return new DefaultAzureCredential()
+    }
   }
 
   async closeConnection () {

package.json

@@ -1,7 +1,7 @@
 {
   "name": "ffc-messaging",
-  "version": "2.9.1",
-  "description": "Messaging npm module for FFC services",
+  "version": "2.10.0",
+  "description": "Messaging npm module for FCP services",
   "main": "index.js",
   "repository": {
     "type": "git",