问如何读取Azure密钥库中存储的值/密码

EN

            string clientSecret = "client secret";
            string clientId = "client id";

            var secreturi = "https://****.vault.azure.net";

            KeyVaultClient kvClient = new KeyVaultClient(async (authority, resource, scope) =>
            {
                var adCredential = new ClientCredential(clientId, clientSecret);
                var authenticationContext = new AuthenticationContext(authority, null);
                return (await authenticationContext.AcquireTokenAsync(resource, adCredential)).AccessToken;
            });
            var keyvaultSecret = await kvClient.GetSecretAsync($"{secreturi}", "testsecret").ConfigureAwait(false);

            Console.Write(keyvaultSecret.Value);

1. `az login` 
        Opens microsoft login page, enter your credentials and you should be logged in.

2. az ad sp create-for-rbac -n <somename> --skip-assignment 
        this outputs a JSON file 
        {
          "appId": "XXXXX-XXXXXX-XXXXXX",
          "displayName": "somename",
          "name": "XXXXX-XXXXXX-XXXXXX",
          "password": "XXXXXXXXXXXXXXXXXXXXX",
          "tenant": "XXXXX-XXXXXX-XXXXXX"
        }
        
        use the above credentials to call Azure key vault service
        
        // Custom object 
        var request = new KeyVaultSecretRequest
        {
           ClientId = this._config["AzureKeyVault:ClientId"],
           ClientSecret = this._config["AzureKeyVault:ClientSecret"], //Password from above JSON
           EndPoint = this._config["AzureKeyVault:EndPoint"].ToUri(),
           TenantId = this._config["AzureKeyVault:TenantId"],
        };

        var options = new SecretClientOptions()
        {
           Retry =
           {
              Delay= TimeSpan.FromSeconds(2),
              MaxDelay = TimeSpan.FromSeconds(16),
              MaxRetries = 5,
              Mode = RetryMode.Exponential,
           }
        };

        var credentials = new ClientSecretCredential(request.TenantId, request.ClientId, request.ClientSecret);

        var client = new SecretClient(request.EndPoint, credentials, options);
        KeyVaultSecret secret = await client.GetSecretAsync(request.Key).ConfigureAwait(false);
        response.Item = secret.Value;