Please add AAD auth support for Azure SQL Database

I cant get it to work because you only accept connection as a string! And I need to get Azure token first and then establish a connection. Please advise if there any options. urgent project!

        private async Task<string> GetToken()
        {

            var ctx = new AuthenticationContext("https://login.microsoftonline.com/xxx");
            var result = await ctx.AcquireTokenAsync("https://database.windows.net/", new ClientCredential("xxx", "xxx"));
            return result.AccessToken;
        }

and then

using (var conn = new SqlConnection("Data Source=tcp:xxx.database.windows.net,1433;Initial Catalog=xxx;"))
            {
                conn.AccessToken = await GetToken();

                return await conn.QueryASync<T>(sql);
            }

https://github.com/DbUp/DbUp/blob/master/src/dbup-sqlserver/SqlConnectionManager.cs#L46
https://github.com/DbUp/DbUp/blob/master/src/dbup-sqlserver/dbup-sqlserver.csproj#L50
https://github.com/DbUp/DbUp/blob/master/src/dbup-sqlserver/dbup-sqlserver.csproj#L54

@sungam3r

~~I'm in need of this feature too! We're using DbUp with Azure SQL. Would love to use AAD or MSIs instead of having to worry about protecting sql credentials~~

@sungam3r has tersely demonstrated how to use Azure Integrated Security with DbUp.
Let's close this issue?

@nzolotar for reference, there is a method overload of SqlDatabase() that accepts boolean for azure support.
Example

    var upgrader =
        DeployChanges.To
            .SqlDatabase(connectionString,null,true)
            .WithScriptsEmbeddedInAssembly(Assembly.GetExecutingAssembly())
            .LogToConsole()
            .Build();

Thanks,

Troy Witthoeft

This does not work for Azure AD when on Azure Gov.

the url for getting the token that is hard-coded is incorrect here ("https://database.windows.net/"). Is there a way to make this configurable?

For the record, for Azure AD on Azure Gov, the url should be: "https://database.usgovcloudapi.net"

My links from #7 point to nowhere... I don't remember what I wanted to show.

Base url for updated links:
https://github.com/DbUp/dbup-sqlserver/tree/main/src/dbup-sqlserver

@holtalanm

@holtalanm in v5 there is an overload that lets you set the resource or azureAdInstance when using https://github.com/DbUp/dbup-sqlserver/blob/eab38c7acfdaf96a29babefd50c17d0bd156b940/src/dbup-sqlserver/AzureSqlConnectionManager.cs#L21 (I think you want the latter)

In v6 (#14) you will be able to pass a TokenCredential which lets you set your cloud

Navigation Menu

Repository navigation

Please add AAD auth support for Azure SQL Database #7

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Please add AAD auth support for Azure SQL Database #7

Description

Activity

sungam3r commented on Jul 10, 2020

TroyWitthoeft commented on Jul 20, 2020

holtalanm commented on Feb 1, 2021

sungam3r commented on Aug 21, 2023

mcolebiltd commented on Apr 12, 2024

droyad commented on Jul 26, 2024

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions