postgres flexiserver EntraId / async db.password

[honest onyx]

Does anyone have any experience with using postgres flexiserver with rolling password on Azure?

I am able to create a connectionString like so using pg.Client the problem is that the accessToken has a expiration time of one day and thus I fear the app will fail once the token expires.

So passing the secret in env doesn't quite cut it and not sure if rolling passwords are even a thing?

The main problem is that for security reasons EntraId is prefered method of granting access to resources.

const { Client } = require('pg');
const { VisualStudioCodeCredential, DefaultAzureCredential, AzureDeveloperCliCredential, ChainedTokenCredential } = require("@azure/identity")
require('dotenv').config();

async function getAccessToken() {
    const credential = new ChainedTokenCredential(
        new AzureDeveloperCliCredential(),
        new VisualStudioCodeCredential(),
        new DefaultAzureCredential()
    );
    const token = await credential.getToken("https://ossrdbms-aad.database.windows.net");
    return token.token;
}


async function getClient() {
    const connectionString = process.env.DATABASE_URL;
    const connection = !connectionString ? {
        host: process.env.PGHOST,
        user: process.env.PGUSER,
        port: Number(process.env.PGPORT),
        password: process.env.PGPASSWORD ? process.env.PGPASSWORD : getAccessToken,
        database: process.env.PGDATABASE,
    } : {
        connectionString: connectionString
    }
    const config = {
        ...connection,
        ssl: {
            rejectUnauthorized: false
        }
    }
    return new Client({
        ...config
    });
}

async function testConnection() {
    const client = await getClient()
    try {
        await client.connect();
        console.log('PostgreSQL Connection successful');
        console.log("PostgreSQL Test Completed");
    } catch (err) {
        console.error('PostgreSQL Connection failed:', err);
    } finally {
        await client.end();
    }
}

[crude jay]

New Community-Help Thread Created!

Help is on the way! To mark it as solved, use the /solve command. In the meantime, here are some existing threads that may help you:

Documentation:

• Production Deployment - Database
• Postgres - Prototyping in development mode
• Postgres
• Storage Adapters - Azure Blob Storage
• Migrations - Using Transactions - Postgres:

[honest onyx]

postgres flexiserver EntraId / async db.password

[honest onyx]

Actually maybe this just works let me try it and get back 🙂

[honest onyx]

My bad there as no issue connecting to it

...
 db: postgresAdapter({
    idType: "uuid",
    push: false,
    logger: useDBDebugger ? new DBLogger() : undefined,
    pool: {
      host: process.env.PGHOST,
      user: process.env.PGUSER,
      port: Number(process.env.PGPORT),
      password: process.env.PGPASSWORD ? process.env.PGPASSWORD : async () => {
        const credential = getDefaultAppCredential();
        const token = await credential.getToken("https://ossrdbms-aad.database.windows.net");
        return token.token;
      },
      database: process.env.PGDATABASE,
      // connectionString: process.env.DATABASE_URI || "",