failed to retrieve token, but accesses KeyVault anyways

Using the very first code example on the page and logging the credential to the console

const { DefaultAzureCredential } = require("@azure/identity");
const { SecretClient } = require("@azure/keyvault-secrets");

const credential = new DefaultAzureCredential();
console.log(credential)

results in

DefaultAzureCredential {
  UnavailableMessage: 'DefaultAzureCredential => failed to retrieve a token from the included credentials. To troubleshoot, visit https://aka.ms/azsdk/js/identity/defaultazurecredential/troubleshoot.',
...

.

However, the following requests using the KeyVault client with

const client = new SecretClient(url, credential);

are successful. How can the client access the KeyVault without retrieving the token? Shouldn’t the token error above break the flow? 🤔

Cheers

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: f034ccd7-da1a-6dc0-2eb2-bfac423ded5c
• Version Independent ID: 67d87a21-ca75-8909-03ac-bea6827cc133
• Content: Azure Key Vault Secret client library for JavaScript
• Content Source: docs-ref-services/latest/keyvault-secrets-readme.md
• Service: keyvault
• GitHub Login: @timovv
• Microsoft Alias: timov

[xirzec]

@letzfets Since you are logging the credential object itself console.log(credential) you are seeing the property on the credential class that contains the message: https://github.com/Azure/azure-sdk-for-js/blob/857929dc41ed0dcf369092fb34f48f3b97525e9c/sdk/identity/identity/src/credentials/defaultAzureCredential.ts#L150

If you’d like to enable logging to see which credential succeeded, please consult https://github.com/Azure/azure-sdk-for-js/tree/main/sdk/identity/identity#logging

[letzfets]

Yeah, makes sense now. Thank you so much. 🙏