Azure · timovv · Oct 8, 2024 · Sep 17, 2024 · Sep 17, 2024 · Sep 17, 2024
@@ -4,6 +4,8 @@
 
 ### Features Added
 
+- Add support for Continuous Access Evaluation (CAE). [#31140](https://github.com/Azure/azure-sdk-for-js/pull/31140)
+
 ### Breaking Changes
 
 ### Bugs Fixed

@@ -98,7 +98,7 @@
     "@azure/core-util": "^1.0.0",
     "@azure/core-rest-pipeline": "^1.1.0",
     "@azure/core-tracing": "^1.0.0",
-    "@azure/keyvault-common": "^1.0.0",
+    "@azure/keyvault-common": "^1.1.0",
     "@azure/logger": "^1.0.0",
     "tslib": "^2.2.0"
   },

@@ -23,8 +23,7 @@ import { LATEST_API_VERSION } from "./constants.js";
 import { PagedAsyncIterableIterator } from "@azure/core-paging";
 import { RoleAssignmentsListForScopeOptionalParams } from "./generated/models/index.js";
 import { TokenCredential } from "@azure/core-auth";
-import { bearerTokenAuthenticationPolicy } from "@azure/core-rest-pipeline";
-import { createKeyVaultChallengeCallbacks } from "@azure/keyvault-common";
+import { addKeyVaultAuthenticationPolicies } from "@azure/keyvault-common";
 import { logger } from "./log.js";
 import { mappings } from "./mappings.js";
 import { tracingClient } from "./tracing.js";
@@ -85,16 +84,7 @@ export class KeyVaultAccessControlClient {
     };
 
     this.client = new KeyVaultClient(serviceVersion, clientOptions);
-
-    this.client.pipeline.addPolicy(
-      bearerTokenAuthenticationPolicy({
-        credential,
-        // The scopes will be populated in the challenge callbacks based on the WWW-authenticate header
-        // returned by the challenge, so pass an empty array as a placeholder.
-        scopes: [],
-        challengeCallbacks: createKeyVaultChallengeCallbacks(options),
-      }),
-    );
+    addKeyVaultAuthenticationPolicies(this.client.pipeline, credential);
   }
 
   /**

@@ -21,8 +21,7 @@ import { KeyVaultSelectiveKeyRestorePoller } from "./lro/selectiveKeyRestore/pol
 import { LATEST_API_VERSION } from "./constants.js";
 import { PollerLike } from "@azure/core-lro";
 import { TokenCredential } from "@azure/core-auth";
-import { bearerTokenAuthenticationPolicy } from "@azure/core-rest-pipeline";
-import { createKeyVaultChallengeCallbacks } from "@azure/keyvault-common";
+import { addKeyVaultAuthenticationPolicies } from "@azure/keyvault-common";
 import { logger } from "./log.js";
 import { mappings } from "./mappings.js";
 
@@ -89,15 +88,7 @@ export class KeyVaultBackupClient {
     };
 
     this.client = new KeyVaultClient(apiVersion, clientOptions);
-    this.client.pipeline.addPolicy(
-      bearerTokenAuthenticationPolicy({
-        credential,
-        // The scopes will be populated in the challenge callbacks based on the WWW-authenticate header
-        // returned by the challenge, so pass an empty array as a placeholder.
-        scopes: [],
-        challengeCallbacks: createKeyVaultChallengeCallbacks(options),
-      }),
-    );
+    addKeyVaultAuthenticationPolicies(this.client.pipeline, credential);
   }
 
   /**

@@ -2,8 +2,7 @@
 // Licensed under the MIT License.
 
 import { TokenCredential } from "@azure/core-auth";
-import { bearerTokenAuthenticationPolicy } from "@azure/core-rest-pipeline";
-import { createKeyVaultChallengeCallbacks } from "@azure/keyvault-common";
+import { addKeyVaultAuthenticationPolicies } from "@azure/keyvault-common";
 import { LATEST_API_VERSION } from "./constants.js";
 import { KeyVaultClient, Setting as GeneratedSetting } from "./generated/index.js";
 import { logger } from "./log.js";
@@ -91,13 +90,7 @@ export class KeyVaultSettingsClient {
     };
 
     this.client = new KeyVaultClient(apiVersion, clientOptions);
-    this.client.pipeline.addPolicy(
-      bearerTokenAuthenticationPolicy({
-        credential,
-        scopes: [],
-        challengeCallbacks: createKeyVaultChallengeCallbacks(options),
-      }),
-    );
+    addKeyVaultAuthenticationPolicies(this.client.pipeline, credential);
   }
 
   /**

@@ -4,6 +4,8 @@
 
 ### Features Added
 
+- Add support for Continuous Access Evaluation (CAE). [#31140](https://github.com/Azure/azure-sdk-for-js/pull/31140)
+
 ### Breaking Changes
 
 ### Bugs Fixed

@@ -102,7 +102,7 @@
     "@azure/core-paging": "^1.1.1",
     "@azure/core-util": "^1.6.1",
     "@azure/core-tracing": "^1.0.0",
-    "@azure/keyvault-common": "^1.0.0",
+    "@azure/keyvault-common": "^1.1.0",
     "@azure/logger": "^1.0.0",
     "tslib": "^2.2.0"
   },

@@ -6,7 +6,6 @@
 /// <reference lib="esnext.asynciterable" />
 
 import { InternalClientPipelineOptions } from "@azure/core-client";
-import { bearerTokenAuthenticationPolicy } from "@azure/core-rest-pipeline";
 
 import { TokenCredential } from "@azure/core-auth";
 
@@ -100,7 +99,7 @@ import {
 } from "./generated/models/index.js";
 import { KeyVaultClient } from "./generated/keyVaultClient.js";
 import { PageSettings, PagedAsyncIterableIterator } from "@azure/core-paging";
-import { createKeyVaultChallengeCallbacks } from "@azure/keyvault-common";
+import { addKeyVaultAuthenticationPolicies } from "@azure/keyvault-common";
 import { CreateCertificatePoller } from "./lro/create/poller.js";
 import { CertificateOperationPoller } from "./lro/operation/poller.js";
 import { DeleteCertificatePoller } from "./lro/delete/poller.js";
@@ -247,12 +246,6 @@ export class CertificateClient {
   ) {
     this.vaultUrl = vaultUrl;
 
-    const authPolicy = bearerTokenAuthenticationPolicy({
-      credential,
-      scopes: [],
-      challengeCallbacks: createKeyVaultChallengeCallbacks(clientOptions),
-    });
-
     const internalClientPipelineOptions: InternalClientPipelineOptions = {
       ...clientOptions,
       loggingOptions: {
@@ -269,7 +262,7 @@ export class CertificateClient {
       clientOptions.serviceVersion || LATEST_API_VERSION,
       internalClientPipelineOptions,
     );
-    this.client.pipeline.addPolicy(authPolicy);
+    addKeyVaultAuthenticationPolicies(this.client.pipeline, credential);
   }
 
   private async *listPropertiesOfCertificatesPage(

@@ -1,9 +1,12 @@
 # Release History
 
-## 1.0.1 (Unreleased)
+## 1.1.0 (Unreleased)
 
 ### Features Added
 
+- Add support for Continuous Access Evaluation (CAE).
+  - To take advantage of this support, `addKeyVaultAuthenticationPolicies` should be used to add the correct policies to the pipeline.
+
 ### Breaking Changes
 
 ### Bugs Fixed

@@ -58,6 +58,7 @@
     "@azure/core-tracing": "^1.0.0",
     "@azure/core-auth": "^1.3.0",
     "@azure/abort-controller": "^2.0.0",
+    "@azure/logger": "^1.1.5",
     "tslib": "^2.2.0"
   },
   "devDependencies": {

@@ -4,10 +4,19 @@
 
 ```ts
 
+import { BearerTokenAuthenticationPolicyOptions } from '@azure/core-rest-pipeline';
 import { ChallengeCallbacks } from '@azure/core-rest-pipeline';
+import { Pipeline } from '@azure/core-rest-pipeline';
+import { RequestBodyType } from '@azure/core-rest-pipeline';
+import { TokenCredential } from '@azure/core-auth';
+
+// @public
+export function addKeyVaultAuthenticationPolicies(pipeline: Pipeline, credential: TokenCredential, options?: Omit<BearerTokenAuthenticationPolicyOptions, "credential" | "scopes"> & CreateChallengeCallbacksOptions): void;
 
 // @public
 export interface CreateChallengeCallbacksOptions {
+    // Warning: (ae-forgotten-export) The symbol "ChallengeStateContainer" needs to be exported by the entry point index.d.ts
+    challengeState?: ChallengeStateContainer;
     disableChallengeResourceVerification?: boolean;
 }