Class SSHExtensions
- Namespace
- Microsoft.Identity.Client.SSHCertificates
- Assembly
- Microsoft.Identity.Client.dll
Extensions that add support for SSH certificates
public static class SSHExtensions
- Inheritance
-
SSHExtensions
- Inherited Members
Methods
WithSSHCertificateAuthenticationScheme(AcquireTokenInteractiveParameterBuilder, string, string)
Instructs AAD to return an SSH certificate instead of a Bearer token. The SSH certificate (not the same as public / private key pair used by SSH), can be used to securely deploy a public SSH key to a machine. See https://aka.ms/msal-net-ssh for details.
public static AcquireTokenInteractiveParameterBuilder WithSSHCertificateAuthenticationScheme(this AcquireTokenInteractiveParameterBuilder builder, string publicKeyJwk, string keyId)
Parameters
builder
AcquireTokenInteractiveParameterBuilderInteractive authentication builder
publicKeyJwk
stringThe public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent
keyId
stringA key identifier, it can be in any format. Used to distinguish between different keys when fetching an SSH certificate from the token cache.
Returns
WithSSHCertificateAuthenticationScheme(AcquireTokenSilentParameterBuilder, string, string)
Instructs AAD to return an SSH certificate instead of a Bearer token. Attempts to retrieve the certificate from the token cache, and if one is not found, attempts to acquire one silently, using the refresh token. See https://aka.ms/msal-net-ssh for details.
public static AcquireTokenSilentParameterBuilder WithSSHCertificateAuthenticationScheme(this AcquireTokenSilentParameterBuilder builder, string publicKeyJwk, string keyId)
Parameters
builder
AcquireTokenSilentParameterBuilderSilent authentication builder
publicKeyJwk
stringThe public SSH key in JWK format (https://tools.ietf.org/html/rfc7517). Currently only RSA is supported, and the JWK should contain only the RSA modulus and exponent
keyId
string
Returns
Remarks
The same keyID must be used to distinguish between various