使用客户端 JavaScript 从 Azure 访问 Key Vault？

Question

I need to access some secret values from Azure key vault in my JavaScript. It is plain JavaScript, no NPM and node. Is there any option to get the value directly from JavaScript? Or I need to write a separate API to retrieve the key vault. This is not relevant to securing some IDs, I want to know is there any possible option to get the key vault value from client-side.

Here is the link explain how to retrieve key vault using node.js

It is not duplicate of How to Hide an API Key in Client-Side Javascript

I want this to be done in plain javascript.

Answer 1

Doing a little research, I would suggest this is not possible purely with client side JavaScript.

With this chrome developer tools open on the network tab; If you browse to the Azure Portal and look at a secret, you can see the in CORS pre-flight request that the allowed origin is https://portal.azure.com

This essentially means that the only client side JavaScript hosted on portal.azure.com is allowed to use the API which gets secrets.

More details on CORS headers here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS