In-memory Identity token cache

sdk/core/azure-core/inc/azure/core/credentials/credentials.hpp

@@ -61,6 +61,8 @@ namespace Azure { namespace Core { namespace Credentials {
      * @param tokenRequestContext A context to get the token in.
      * @param context A context to control the request lifetime.
      *
+     * @return Authentication token.
+     *
      * @throw Azure::Core::Credentials::AuthenticationException Authentication error occurred.
      */
     virtual AccessToken GetToken(

sdk/identity/azure-identity/CHANGELOG.md

@@ -4,6 +4,8 @@
 
 ### Features Added
 
+- Added token caching.
+
 ### Breaking Changes
 
 ### Bugs Fixed

sdk/identity/azure-identity/CMakeLists.txt

@@ -60,13 +60,16 @@ set(
   AZURE_IDENTITY_SOURCE
     src/private/managed_identity_source.hpp
     src/private/package_version.hpp
+    src/private/token_cache.hpp
+    src/private/token_cache_internals.hpp
     src/private/token_credential_impl.hpp
     src/chained_token_credential.cpp
     src/client_certificate_credential.cpp
     src/client_secret_credential.cpp
     src/environment_credential.cpp
     src/managed_identity_credential.cpp
     src/managed_identity_source.cpp
+    src/token_cache.cpp
     src/token_credential_impl.cpp
 )
 
@@ -106,6 +109,9 @@ az_rtti_setup(
 )
 
 if(BUILD_TESTING)
+  # define a symbol that enables some test hooks in code
+  add_compile_definitions(TESTING_BUILD)
+
   # tests
   if (NOT AZ_ALL_LIBRARIES OR FETCH_SOURCE_DEPS)
     include(AddGoogleTest)

sdk/identity/azure-identity/inc/azure/identity/client_secret_credential.hpp

@@ -51,13 +51,18 @@ namespace Azure { namespace Identity {
     std::unique_ptr<_detail::TokenCredentialImpl> m_tokenCredentialImpl;
     Core::Url m_requestUrl;
     std::string m_requestBody;
+
+    std::string m_tenantId;
+    std::string m_clientId;
+    std::string m_authorityHost;
+
     bool m_isAdfs;
 
     ClientSecretCredential(
-        std::string const& tenantId,
-        std::string const& clientId,
+        std::string tenantId,
+        std::string clientId,
         std::string const& clientSecret,
-        std::string const& authorityHost,
+        std::string authorityHost,
         Core::Credentials::TokenCredentialOptions const& options);
 
   public:
@@ -70,8 +75,8 @@ namespace Azure { namespace Identity {
      * @param options Options for token retrieval.
      */
     explicit ClientSecretCredential(
-        std::string const& tenantId,
-        std::string const& clientId,
+        std::string tenantId,
+        std::string clientId,
         std::string const& clientSecret,
         ClientSecretCredentialOptions const& options);
 
@@ -86,7 +91,7 @@ namespace Azure { namespace Identity {
     explicit ClientSecretCredential(
         std::string tenantId,
         std::string clientId,
-        std::string clientSecret,
+        std::string const& clientSecret,
         Core::Credentials::TokenCredentialOptions const& options
         = Core::Credentials::TokenCredentialOptions());
 
@@ -102,6 +107,8 @@ namespace Azure { namespace Identity {
      * @param tokenRequestContext A context to get the token in.
      * @param context A context to control the request lifetime.
      *
+     * @return Authentication token.
+     *
      * @throw Azure::Core::Credentials::AuthenticationException Authentication error occurred.
      */
     Core::Credentials::AccessToken GetToken(

sdk/identity/azure-identity/inc/azure/identity/managed_identity_credential.hpp

@@ -59,6 +59,8 @@ namespace Azure { namespace Identity {
      * @param tokenRequestContext A context to get the token in.
      * @param context A context to control the request lifetime.
      *
+     * @return Authentication token.
+     *
      * @throw Azure::Core::Credentials::AuthenticationException Authentication error occurred.
      */
     Core::Credentials::AccessToken GetToken(

sdk/identity/azure-identity/src/client_secret_credential.cpp

@@ -3,39 +3,45 @@
 
 #include "azure/identity/client_secret_credential.hpp"
 
+#include "private/token_cache.hpp"
 #include "private/token_credential_impl.hpp"
 
 #include <sstream>
+#include <utility>
 
 using namespace Azure::Identity;
 
 std::string const Azure::Identity::_detail::g_aadGlobalAuthority
     = "https://login.microsoftonline.com/";
 
 ClientSecretCredential::ClientSecretCredential(
-    std::string const& tenantId,
-    std::string const& clientId,
+    std::string tenantId,
+    std::string clientId,
     std::string const& clientSecret,
-    std::string const& authorityHost,
+    std::string authorityHost,
     Azure::Core::Credentials::TokenCredentialOptions const& options)
     : m_tokenCredentialImpl(std::make_unique<_detail::TokenCredentialImpl>(options)),
-      m_isAdfs(tenantId == "adfs")
+      m_tenantId(std::move(tenantId)), m_clientId(std::move(clientId)),
+      m_authorityHost(std::move(authorityHost))
 {
   using Azure::Core::Url;
-  m_requestUrl = Url(authorityHost);
-  m_requestUrl.AppendPath(tenantId);
+
+  m_isAdfs = (m_tenantId == "adfs");
+
+  m_requestUrl = Url(m_authorityHost);
+  m_requestUrl.AppendPath(m_tenantId);
   m_requestUrl.AppendPath(m_isAdfs ? "oauth2/token" : "oauth2/v2.0/token");
 
   std::ostringstream body;
-  body << "grant_type=client_credentials&client_id=" << Url::Encode(clientId)
+  body << "grant_type=client_credentials&client_id=" << Url::Encode(m_clientId)
        << "&client_secret=" << Url::Encode(clientSecret);
 
   m_requestBody = body.str();
 }
 
 ClientSecretCredential::ClientSecretCredential(
-    std::string const& tenantId,
-    std::string const& clientId,
+    std::string tenantId,
+    std::string clientId,
     std::string const& clientSecret,
     ClientSecretCredentialOptions const& options)
     : ClientSecretCredential(tenantId, clientId, clientSecret, options.AuthorityHost, options)
@@ -45,7 +51,7 @@ ClientSecretCredential::ClientSecretCredential(
 ClientSecretCredential::ClientSecretCredential(
     std::string tenantId,
     std::string clientId,
-    std::string clientSecret,
+    std::string const& clientSecret,
     Core::Credentials::TokenCredentialOptions const& options)
     : ClientSecretCredential(
         tenantId,
@@ -62,28 +68,39 @@ Azure::Core::Credentials::AccessToken ClientSecretCredential::GetToken(
     Azure::Core::Credentials::TokenRequestContext const& tokenRequestContext,
     Azure::Core::Context const& context) const
 {
-  return m_tokenCredentialImpl->GetToken(context, [&]() {
-    using _detail::TokenCredentialImpl;
-    using Azure::Core::Http::HttpMethod;
+  using _detail::TokenCache;
+  using _detail::TokenCredentialImpl;
 
-    std::ostringstream body;
-    body << m_requestBody;
+  std::string scopesStr;
+  {
+    auto const& scopes = tokenRequestContext.Scopes;
+    if (!scopes.empty())
     {
-      auto const& scopes = tokenRequestContext.Scopes;
-      if (!scopes.empty())
+      scopesStr = TokenCredentialImpl::FormatScopes(scopes, m_isAdfs);
+    }
+  }
+
+  return TokenCache::GetToken(m_tenantId, m_clientId, m_authorityHost, scopesStr, [&]() {
+    return m_tokenCredentialImpl->GetToken(context, [&]() {
+      using Azure::Core::Http::HttpMethod;
+
+      std::ostringstream body;
+      body << m_requestBody;
+
+      if (!scopesStr.empty())
       {
-        body << "&scope=" << TokenCredentialImpl::FormatScopes(scopes, m_isAdfs);
+        body << "&scope=" << scopesStr;
       }
-    }
 
-    auto request = std::make_unique<TokenCredentialImpl::TokenRequest>(
-        HttpMethod::Post, m_requestUrl, body.str());
+      auto request = std::make_unique<TokenCredentialImpl::TokenRequest>(
+          HttpMethod::Post, m_requestUrl, body.str());
 
-    if (m_isAdfs)
-    {
-      request->HttpRequest.SetHeader("Host", m_requestUrl.GetHost());
-    }
+      if (m_isAdfs)
+      {
+        request->HttpRequest.SetHeader("Host", m_requestUrl.GetHost());
+      }
 
-    return request;
+      return request;
+    });
   });
 }