节点中VSCode Azure帐户扩展的“刷新令牌已过期”

Question

我正在尝试使用Azure帐户扩展在VSCode中进行身份验证，如下所述：https://github.com/Azure/azure-sdk-for-js/blob/master/sdk/identity/identity/README.md#authenticating-通过visual studio代码

然后使用DefaultAzureCredential，如下所述：https://github.com/Azure/azure-sdk-for-js/blob/master/sdk/identity/identity/README.md#authenticating-使用defaultazurecredential

我已经安装了“@azure/identity”：“^1.1.0”，我正在使用上面的示例尝试通过azure进行身份验证以访问应用程序配置实例，但身份验证失败，出现以下错误。

invalid_grant(status code 400).
More details:
AADSTS700082: The refresh token has expired due to inactivity. The token was issued on 2020-03-19T16:25:46.3627136Z and was inactive for 90.00:00:00.
Trace ID: 391fe4c9-beb4-4253-9b9f-cada7a647900
Correlation ID: b5b7743b-371e-482a-adb7-8d2260d6029b
Timestamp: 2020-11-03 08:24:13Z
AuthenticationError: invalid_grant(status code 400).
More details:
AADSTS700082: The refresh token has expired due to inactivity. The token was issued on 2020-03-19T16:25:46.3627136Z and was inactive for 90.00:00:00.
Trace ID: 391fe4c9-beb4-4253-9b9f-cada7a647900
Correlation ID: b5b7743b-371e-482a-adb7-8d2260d6029b
Timestamp: 2020-11-03 08:24:13Z
    at IdentityClient.<anonymous> (C:\projects\udi-form\node_modules\@azure\identity\src\client\identityClient.ts:99:21)
    at Generator.next (<anonymous>)
    at fulfilled (C:\projects\udi-form\node_modules\@azure\identity\node_modules\tslib\tslib.js:111:62)
    at processTicksAndRejections (internal/process/task_queues.js:97:5)

我已经尝试多次退出和返回，这似乎工作正常。VSCode中的状态栏显示了我的帐户，我可以从我的订阅中进行选择，因此存在连接。

我已经调试了一段时间，似乎没有在脚本运行后设置任何预期的环境变量。我是否需要一些额外的启动配置来进行设置？

我当前正在使用此配置运行ts节点脚本：

        {
            "name": "TS file",
            "type": "node",
            "request": "launch",
            "args": ["${fileBasename}"],
            "runtimeArgs": [
                "-r",
                "ts-node/register",
                "-r",
                "tsconfig-paths/register"
            ],
            "cwd": "${fileDirname}",
            "outputCapture": "std",
            "resolveSourceMapLocations": [
                "${workspaceFolder}/**",
                "!**/node_modules/**"
            ],
            "env": {
                "NODE_ENV": "development"
            }
        },

我测试的代码是这个文件。除了导入的azure模块之外，它没有其他依赖项：

import { AppConfigurationClient } from "@azure/app-configuration"
import { DefaultAzureCredential } from "@azure/identity"

import { setLogLevel } from "@azure/logger"
setLogLevel("verbose")

const start = async () => {
    const credentials = new DefaultAzureCredential()
    const appConfigClient = new AppConfigurationClient("[app configuration endpoint]", credentials)
    console.log(await appConfigClient.getConfigurationSetting({ key: "inf/cdnUrl" }))
}

start().catch((error) => {
    console.error(error)
    process.exit(1)
})

编辑：为VisualStudioCodeCredential调出DefaultAzureCredential无效。

Answer 1

对于其他看这个问题的人。原来这是一个边缘案件与我的设置。

简而言之，一旦前一个刷新令牌过期，扩展没有正确地重新协商新的刷新令牌。

Github上的MS团队在此解决了这一问题：https://github.com/microsoft/vscode-azure-account/issues/234