"use strict";
// Copyright 2016-2018, Pulumi Corporation.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    var desc = Object.getOwnPropertyDescriptor(m, k);
    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
      desc = { enumerable: true, get: function() { return m[k]; } };
    }
    Object.defineProperty(o, k2, desc);
}) : (function(o, m, k, k2) {
    if (k2 === undefined) k2 = k;
    o[k2] = m[k];
}));
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
    Object.defineProperty(o, "default", { enumerable: true, value: v });
}) : function(o, v) {
    o["default"] = v;
});
var __importStar = (this && this.__importStar) || function (mod) {
    if (mod && mod.__esModule) return mod;
    var result = {};
    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
    __setModuleDefault(result, mod);
    return result;
};
Object.defineProperty(exports, "__esModule", { value: true });
exports.getServiceClientCredentials = void 0;
const pulumi = __importStar(require("@pulumi/pulumi"));
const ms_rest_js_1 = require("@azure/ms-rest-js");
const identity = __importStar(require("@azure/identity"));
const config = __importStar(require("../config"));
const utilities = __importStar(require("../utilities"));
/**
 * Obtain credentials to query Azure Management API. Depending on the environment configuration, this
 * are either based on MSI, a service principal, or Azure CLI user credentials.
 */
async function getServiceClientCredentials() {
    const useMsi = config.useMsi || utilities.getEnvBoolean("ARM_USE_MSI");
    const clientId = config.clientId || utilities.getEnv("AZURE_CLIENT_ID", "ARM_CLIENT_ID");
    const clientSecret = config.clientSecret || utilities.getEnv("AZURE_CLIENT_SECRET", "ARM_CLIENT_SECRET");
    const clientCertPath = config.clientCertificatePath || utilities.getEnv("ARM_CLIENT_CERTIFICATE_PATH");
    const clientCertPassword = config.clientCertificatePassword || utilities.getEnv("ARM_CLIENT_CERTIFICATE_PASSWORD");
    const tenantId = config.tenantId || utilities.getEnv("AZURE_TENANT_ID", "ARM_TENANT_ID");
    config.oidcToken;
    let tokenCredential = new identity.AzureCliCredential();
    if (useMsi) {
        tokenCredential = new identity.ManagedIdentityCredential();
    }
    else if (clientId && tenantId) {
        if (clientSecret) {
            tokenCredential = new identity.ClientSecretCredential(tenantId, clientId, clientSecret);
        }
        else if (clientCertPath) {
            tokenCredential = new identity.ClientCertificateCredential(tenantId, clientId, { certificatePath: clientCertPath, certificatePassword: clientCertPassword });
        }
    }
    pulumi.log.debug(`Using Azure credentials: ${tokenCredential.constructor.name}`);
    return new ms_rest_js_1.AzureIdentityCredentialAdapter(tokenCredential);
}
exports.getServiceClientCredentials = getServiceClientCredentials;
//# sourceMappingURL=zMixins.js.map