403 Forbidden Access, while decrypting using Azure key vault

Question

I am trying to encrypt and decrypt a string locally (client-side encryption). I am encrypting successfully, whereas while trying to decrypt. I am getting Error 403.

I am attaching my code and the permission screenshot here. Any help will be appreciated.

        var vaultUri = new Uri(keyVaultUrl);
        var client = new KeyClient(vaultUri, credential: new DefaultAzureCredential());
        
        
        var cryptoClient = new CryptographyClient(key1.Id,  new DefaultAzureCredential());
        EncryptResult encryptResult = cryptoClient.Encrypt(EncryptionAlgorithm.RsaOaep256, Encoding.UTF8.GetBytes(VarToEncrypt));
        Console.WriteLine("Encrypted string is: " + Convert.ToBase64String(encryptResult.Ciphertext));

        var secretClient = new SecretClient(vaultUri,  new DefaultAzureCredential());
        secretClient.SetSecret(new KeyVaultSecret("Temp", Convert.ToBase64String(encryptResult.Ciphertext)));
        
        Console.WriteLine("Do you want to decrypt? (Y/N)");
        if (Console.ReadLine().ToUpper() == "Y")
        {
            var encryptedSecret = secretClient.GetSecret("Temp");
            DecryptResult decryptResult = cryptoClient.Decrypt(EncryptionAlgorithm.RsaOaep256, encryptResult.Ciphertext);
            Console.WriteLine("Decrypted string is: " + Encoding.UTF8.GetString(decryptResult.Plaintext));
        }

Matt Small · Accepted Answer · 2021-10-06 17:04:23Z

1

403 means your service principal does not have an access policy configured to decrypt.

answered Oct 6, 2021 at 17:04

Matt Small

2,3031 gold badge13 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

403 Forbidden Access, while decrypting using Azure key vault

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related