Azure Functions - 配置客户端证书身份验证

本文介绍了Azure Functions - 配置客户端证书身份验证的处理方法，对大家解决问题具有一定的参考价值

问题描述

函数是否支持在消费计划中使用客户端证书授权访问函数?类似于描述的方法这里?基本上，如果调用者没有提供有效的客户端证书，我正在寻找 Functions 运行时立即拒绝连接请求，而无需我在代码中实现该授权例程.

Do functions support authorizing access to a Function by using client certificates, in a consumption plan? Something similar to the approach described here? Basically, I'm looking for the Functions runtime to immediately reject connection requests if the caller does not present a valid client certificate, without me having to implement that authorization routine in the code.

推荐答案

这是我想出的代码，注意:这是针对 Azure Functions v1，当 req 是 HttpRequestMessage


Here's the code I came up with, note: this is for Azure Functions v1, when req is an HttpRequestMessage
来电者:
X509Certificate2 clientCert = req.GetClientCertificate();

if (!IsValidClientCertificate(clientCert))
{
    return req.CreateErrorResponse(HttpStatusCode.Unauthorized, "A valid client certificate is not found");
}

对于 Azure Functions v2，您可以使用 req.HttpContext.Connection.ClientCertificate
基本验证功能:
static bool IsValidClientCertificate(X509Certificate2 clientCert)
{
    // check the cert's thumbprint against expected thumbprint
    if (clientCert.Thumbprint != "<expected thumprint>"
    { 
        return false;
    }

    // check that we're within the cert's validity period
    if (DateTime.Now > clientCert.NotAfter || DateTime.Now < clientCert.NotBefore)
    {
        return false;
    }

    // optionally check cert chaining validity
    // if(!clientCert.Verify()) { return false; }
}


                        这篇关于Azure Functions - 配置客户端证书身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，WP2

Azure Functions - 配置客户端证书身份验证

问题描述

推荐答案

admin_action_{$_REQUEST[‘action’]}

admin_footer-{$GLOBALS[‘hook_suffix’]}

customize_save_{$this->id_data[‘base’]}

customize_value_{$this->id_data[‘base’]}

get_comment_author_url

network_admin_edit_{$_GET[‘action’]}

network_sites_updated_message_{$_GET[‘updated’]}

pre_wp_is_site_initialized

WordPress 的SEO 教学：如何在网站中加入关键字（Meta Keywords）与Meta 描述（Meta Description）？

谷歌的SEO是什么