Pascal (Lazarus/Delphi)

Azure Key Vault - List Matching Secrets

See more Secrets Examples

List secrets in the Azure Key Vault matching one or more wildcarded names for app, service, domain, and username.

Note: This example requires Chilkat v10.1.0 or later.

Pascal (Lazarus/Delphi)

program ChilkatDemo;

// Demonstrates using the Chilkat Pascal wrapper via the C bridge DLL.
// Builds as a console application under Lazarus (FPC) or Delphi.

{$IFDEF FPC}
  {$MODE DELPHI}
{$ENDIF}
{$APPTYPE CONSOLE}

uses
  {$IFDEF UNIX}
  cthreads,
  {$ENDIF}
  SysUtils,
  CkDllLoader,
  Chilkat.Secrets,
  Chilkat.JsonObject;

// ---------------------------------------------------------------------------

procedure RunDemo;
var
  success: Boolean;
  bootstrap: TSecrets;
  bsId: TJsonObject;
  secrets: TSecrets;
  jsonMatch: TJsonObject;
  results: TJsonObject;
  appName: string;
  service: string;
  domain: string;
  username: string;
  azure_id: string;
  i: Integer;
  numSecrets: Integer;

begin
  success := False;

  //  This example requires the Chilkat API to have been previously unlocked.
  //  See Global Unlock Sample for sample code.

  //  The bootstrap secret will contain the following information:

  //  Azure Tenant ID
  //  Azure Client ID
  //  Azure Client Secret

  //  See following examples for setting up a bootstrap secret in memory, 
  //  or in the local manager (Windows Credentials Manager or Apple Keychain)
  //  Setup Bootstrap Secret in Local Manager
  //  Setup Bootstrap Secret in Memory
  bootstrap := TSecrets.Create;

  //  Set the location of the bootstrap secret.
  //  Can be "local_manager" or "memory", depending on how you setup the bootstrap secret.
  //  ---------------------------------------------------------------------------------------------
  //  If your operating system is NOT Windows or MacOS/iOS, then change "local_manager" to "memory"
  //  You can also, if desired, use "memory" on Windows and MacOS/iOS if your bootstrap secret was previously setup in memory.
  //  ---------------------------------------------------------------------------------------------
  bootstrap.Location := 'local_manager';

  //  Specify the bootstrap secret to be used.
  bsId := TJsonObject.Create;
  bsId.UpdateString('appName','azure_bs');
  bsId.UpdateString('service','Example');
  bsId.UpdateString('username','Joe');

  //  ----------------------------------------------------
  secrets := TSecrets.Create;

  //  Setup for the Azure Key Vault
  secrets.Location := 'azure_key_vault';
  success := secrets.SetBootstrapSecret(bsId,bootstrap);
  if (success = False) then
    begin
      WriteLn(secrets.LastErrorText);
      Exit;
    end;

  //  Set wildcarded or exact values for appName, service, domain, and username.
  //  Omit any members where anything is allowed to match, or alternatively specify "*" to match anything.
  jsonMatch := TJsonObject.Create;
  jsonMatch.UpdateString('appName','Test*');
  //  The following lines can be omitted. Not specifying anything for service, domain, or username is the same as "*".
  jsonMatch.UpdateString('service','*');
  jsonMatch.UpdateString('domain','*');
  jsonMatch.UpdateString('username','*');

  //  For Azure Key Vault, we also need to specify the name of the vault containing the secrets to be listed.
  //  Replace "kvChilkat" with the name of your key vault.
  jsonMatch.UpdateString('vaultName','kvChilkat');

  results := TJsonObject.Create;
  results.EmitCompact := False;

  success := secrets.ListSecrets(jsonMatch,results);
  if (success = False) then
    begin
      WriteLn(secrets.LastErrorText);
      Exit;
    end;

  WriteLn(results.Emit());

  //  Sample output:

  //  {
  //    "secrets": [
  //      {
  //        "appName": "Test",
  //        "service": "Something",
  //        "domain": "Xyz",
  //        "username": "Abc",
  //        "azure_id": "https://kvchilkat.vault.azure.net/secrets/Test-Something-Xyz-Abc"
  //      },
  //      {
  //        "appName": "Test2",
  //        "service": "Custom",
  //        "domain": "Ocean",
  //        "username": "Starfish",
  //        "azure_id": "https://kvchilkat.vault.azure.net/secrets/Test2-Custom-Ocean-Starfish"
  //      }
  //    ]
  //  }

  //  ---------------------------------------------------------------------------------------
  //  Here's sample code for parsing the JSON list of secrets.

  i := 0;
  numSecrets := results.SizeOfArray('secrets');
  while i < numSecrets do
    begin
      results.I := i;
      //  Note: appName and domain are optional and may not exist in any given secret.
      appName := results.StringOf('secrets[i].appName');
      service := results.StringOf('secrets[i].service');
      domain := results.StringOf('secrets[i].domain');
      username := results.StringOf('secrets[i].username');
      //  Informational field for the raw Azure secret name.
      azure_id := results.StringOf('secrets[i].azure_id');
      i := i + 1;
    end;



  bootstrap.Free;
  bsId.Free;
  secrets.Free;
  jsonMatch.Free;
  results.Free;

end;

// ---------------------------------------------------------------------------

begin

  try
    RunDemo;
  except
    on E: Exception do
      WriteLn('Unhandled exception: ', E.ClassName, ': ', E.Message);
  end;

  WriteLn;
  {$IFDEF MSWINDOWS}
  WriteLn('Press Enter to exit...');
  ReadLn;
  {$ENDIF}
end.