Deploying Redis on Azure

package com.example.bookshop.config;

import com.azure.identity.DefaultAzureCredential;
import com.azure.identity.DefaultAzureCredentialBuilder;
import redis.clients.authentication.entraid.EntraIDTokenAuthConfigBuilder;
import redis.clients.jedis.DefaultJedisClientConfig;
import redis.clients.jedis.RedisClient;
import redis.clients.jedis.authentication.AuthXManager;

public class RedisEntraIdConfig {

    public RedisClient jedisClient(String hostname, String scope) {
        DefaultAzureCredential credential = new DefaultAzureCredentialBuilder().build();
        var authConfig = EntraIDTokenAuthConfigBuilder.builder()
                .tokenCredential(credential)
                .scopes(scope) // e.g. "https://redis.azure.com/.default"
                .build();
        return RedisClient.builder()
                .hostAndPort(hostname, 10000)
                .clientConfig(DefaultJedisClientConfig.builder()
                        .ssl(true)
                        .authXManager(new AuthXManager(authConfig))
                        .build())
                .build();
    }
}

package com.example.bookshop.config;

import com.azure.identity.DefaultAzureCredential;
import com.azure.identity.DefaultAzureCredentialBuilder;
import io.lettuce.core.RedisCredentialsProvider;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.data.redis.connection.RedisStandaloneConfiguration;
import org.springframework.data.redis.connection.lettuce.LettuceClientConfiguration;
import org.springframework.data.redis.connection.lettuce.LettuceConnectionFactory;
import redis.clients.authentication.entraid.EntraIDTokenAuthConfigBuilder;

@Configuration
public class RedisEntraIdConfig {

    @Bean
    public LettuceConnectionFactory redisConnectionFactory(
            @org.springframework.beans.factory.annotation.Value("${redis.azure.host}") String host,
            @org.springframework.beans.factory.annotation.Value("${redis.azure.scope}") String scope) {
        DefaultAzureCredential credential = new DefaultAzureCredentialBuilder().build();
        RedisCredentialsProvider credentialsProvider = redis.clients.authentication.entraid.lettuce
                .LettuceEntraIDCredentialsProviderFactory.create(
                        EntraIDTokenAuthConfigBuilder.builder()
                                .tokenCredential(credential)
                                .scopes(scope)
                                .build());

        RedisStandaloneConfiguration serverConfig = new RedisStandaloneConfiguration(host, 10000);
        LettuceClientConfiguration clientConfig = LettuceClientConfiguration.builder()
                .useSsl()
                .build();
        LettuceConnectionFactory factory = new LettuceConnectionFactory(serverConfig, clientConfig);
        factory.setShareNativeConnection(false);
        return factory;
    }
}

param location string = resourceGroup().location
param cacheName string = 'bookshop-cache'

resource redisEnterprise 'Microsoft.Cache/redisEnterprise@2025-04-01' = {
  name: cacheName
  location: location
  sku: {
    name: 'Balanced_B1'
  }
  properties: {
    highAvailability: 'Enabled'
    minimumTlsVersion: '1.2'
  }
}

resource defaultDatabase 'Microsoft.Cache/redisEnterprise/databases@2025-04-01' = {
  name: 'default'
  parent: redisEnterprise
  properties: {
    clientProtocol: 'Encrypted'
    clusteringPolicy: 'OSSCluster'
    evictionPolicy: 'VolatileLRU'
    port: 10000
    modules: [
      { name: 'RedisJSON' }
    ]
  }
}