support key vault reference with specific version

Author: Eskibear

src/AzureAppConfigurationImpl.ts

@@ -67,14 +67,14 @@ export class AzureAppConfigurationImpl extends Map<string, unknown> implements A
         }
 
         // precedence: secret clients > credential > secret resolver
-        const { name: secretName, vaultUrl, sourceId } = parseKeyVaultSecretIdentifier(
+        const { name: secretName, vaultUrl, sourceId, version } = parseKeyVaultSecretIdentifier(
             parseSecretReference(setting).value.secretId
         );
 
         const client = this.getSecretClient(new URL(vaultUrl));
         if (client) {
             // TODO: what if error occurs when reading a key vault value? Now it breaks the whole load.
-            const secret = await client.getSecret(secretName);
+            const secret = await client.getSecret(secretName, { version });
             return secret.value;
         }
 

test/keyvault.test.js

@@ -15,6 +15,7 @@ const { SecretClient } = require("@azure/keyvault-secrets");
 const mockedData = [
     // key, secretUri, value
     ["TestKey", "https://fake-vault-name.vault.azure.net/secrets/fakeSecretName", "SecretValue"],
+    ["TestKeyFixedVersion", "https://fake-vault-name.vault.azure.net/secrets/fakeSecretName/741a0fc52610449baffd6e1c55b9d459", "OldSecretValue"],
     ["TestKey2", "https://fake-vault-name2.vault.azure.net/secrets/fakeSecretName2", "SecretValue2"]
 ];
 
@@ -48,6 +49,7 @@ describe("key vault reference", function () {
         });
         expect(settings).not.undefined;
         expect(settings.get("TestKey")).eq("SecretValue");
+        expect(settings.get("TestKeyFixedVersion")).eq("OldSecretValue");
     });
 
     it("should resolve key vault reference with secret resolver", async () => {

test/utils/testHelper.js

@@ -24,9 +24,12 @@ function mockSecretClientGetSecret(uriValueList) {
         dict.set(uri, value);
     }
 
-    sinon.stub(SecretClient.prototype, "getSecret").callsFake(function (secretName) {
+    sinon.stub(SecretClient.prototype, "getSecret").callsFake(function (secretName, options) {
         const url = new URL(this.vaultUrl);
         url.pathname = `/secrets/${secretName}`;
+        if (options?.version) {
+            url.pathname += `/${options.version}`;
+        }
         return { value: dict.get(url.toString()) };
     })
 }