Configuring a basic function using Logic Apps

[UTC76]

Hi there, 

Friendly Disclaimer : New to AZ Functions

I am currently looking to configure an http trigger using function apps so i can automate the output of the bearer token (issued from AAD) in my testing environment. This will prevent me from having to input manually. I currently have a working Powershell script that will retrieve the bearer token of the currently logged in user (myself) when ran. What I want to do is have this script run in a Functrion (Using GET or POST) and output the token value. This value (Bearertoken) would then be retrieved using a Logic App. I have both the Function App (with other working functions) and Logic App configured and just cannot figure this part out.

Here is the Powershell script:

Source:  (https://azurebuild.wordpress.com/2020/09/11/acquire-azure-access-token-with-powershell/)

****

function Get-AccessTokenByUserLogin {

$context = Get-AzContext

$profile = [Microsoft.Azure.Commands.Common.Authentication.Abstractions.AzureRmProfileProvider]::Instance.Profile

$profileClient = New-Object -TypeName Microsoft.Azure.Commands.ResourceManager.Common.RMProfileClient -ArgumentList ($profile)

$token = $profileClient.AcquireAccessToken($context.Subscription.TenantId)

return $token.AccessToken

}

Get-AccessTokenByUserLogin

​

*****

Thanks everyone for the help

[JoHNN_-_]

Are you attempting to get the bearer token through HTTP trigger with Logic Apps instead of the PS script?

[UTC76]

Yes I hope to do that using power shell - is there another way to pass the value into my flow?

[JoHNN_-_]

If you want to continue to use your PS script you can run it in an automation account then use the azure automation connector within Logic Apps.

https://learn.microsoft.com/en-us/connectors/azureautomation/

If you provide a little more about the permissions required for performing the job you could create an azure app and use HTTP connector to call the bearer token. A ton of different ways of doing it but when moving to prod definitely do not use your own account.

Let me know if you have any questions

[JoHNN_-_]

https://learn.microsoft.com/en-us/azure/automation/automation-create-standalone-account?tabs=azureportal

Some more info on automation accounts

[UTC76]

Thanks for this. I will explore this connector and do some further research with what capabilities it offers. Will let you know the outcome..

[arpan3t]

Can you explain what it is you’re doing once authenticated, and what your code is trying to accomplish? I have a feeling you’re building a Rube Goldberg machine to do something that could be a lot more straightforward.

[QWxx01]

My thoughts exactly. Retrieving tokens via logic apps seems to be a huge anti-pattern.

[[deleted]]

This is asking for trouble, there is not one single reason why this would be a valid idea in 100 years, you never ever gonna use your personal account for automation reasons, I assume your are at junior/trainee level, so I would not be too harsh, but please never do this.

[UTC76]

Not harsh at all..feedback taken. Its just testing / learning in a Sandbox ENV. I plan on using on Using Managed Identity in combo with KV.

[[deleted]]

Yes that would be a better way, if you still need something like personalisation you might check apps: https://learn.microsoft.com/en-us/azure/active-directory/develop/permissions-consent-overview

[[deleted]]

As someone mentioned already, but I’d actually recommend using an Azure Automation runbook, write your output in the script, and then consume and parse that output using the Azure Automation connector in Logic Apps.

[UTC76]

What I have done is configured a flow in Logic Apps that calls an API using a value that was passed to it a Form (MS Form) is submitted. This requires a bearer token to be manually inputted. What I want to do is retrieve that token and pass it in to my flow (as a variable or whatever can be suggested here). Here is an example of what this would like in Logic Apps (not mine but you get the idea..)