tus · sam-ayo · Feb 14, 2026 · Feb 14, 2026 · Feb 14, 2026 · Feb 14, 2026
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -23,4 +23,4 @@
     "@changesets/cli": "^2.29.2",
     "typescript": "^5.8.2"
   }
-}
+}
diff --git a/packages/azure-store/package.json b/packages/azure-store/package.json
@@ -22,6 +22,7 @@
   },
   "dependencies": {
     "@tus/utils": "^0.6.0",
+    "@azure/core-auth": "^1.9.0",
     "@azure/storage-blob": "^12.24.0",
     "debug": "^4.3.4"
   },
@@ -35,4 +36,4 @@
   "engines": {
     "node": ">=20.19.0"
   }
-}
+}
diff --git a/packages/azure-store/src/index.ts b/packages/azure-store/src/index.ts
@@ -16,13 +16,21 @@ import {
   type ContainerClient,
   StorageSharedKeyCredential,
 } from '@azure/storage-blob'
-
-type Options = {
-  cache?: KvStore<Upload>
-  account: string
-  accountKey: string
-  containerName: string
-}
+import type {TokenCredential} from '@azure/core-auth'
+
+type Options =
+  | {
+      cache?: KvStore<Upload>
+      account: string
+      containerName: string
+      accountKey: string
+    }
+  | {
+      cache?: KvStore<Upload>
+      account: string
+      containerName: string
+      credential: TokenCredential
+    }
 
 const log = debug('tus-node-server:stores:azurestore')
 
@@ -44,23 +52,17 @@ export class AzureStore extends DataStore {
     if (!options.account) {
       throw new Error('Azure store must have a account')
     }
-    if (!options.accountKey) {
-      throw new Error('Azure store must have a account key')
-    }
     if (!options.containerName) {
       throw new Error('Azure store must have a container name')
     }
 
     const storageAccountBaseUrl = `https://${options.account}.blob.core.windows.net`
-    const sharedKeyCredential = new StorageSharedKeyCredential(
-      options.account,
-      options.accountKey
-    )
+    const credential =
+      'credential' in options
+        ? options.credential
+        : new StorageSharedKeyCredential(options.account, options.accountKey)
 
-    this.blobServiceClient = new BlobServiceClient(
-      storageAccountBaseUrl,
-      sharedKeyCredential
-    )
+    this.blobServiceClient = new BlobServiceClient(storageAccountBaseUrl, credential)
     this.containerClient = this.blobServiceClient.getContainerClient(
       options.containerName
     )
-Original file line number
+Diff line change
@@ Expand Up / @@ -23,4 +23,4 @@ @@
         "@changesets/cli": "^2.29.2",
         "typescript": "^5.8.2"
       }
-    }
+    }