microsoft-authentication-library-for-python VS microsoft-authentication-library-for-dotnet

# Title URL Accessed-On 1 Desktop app that calls web APIs: Acquire a token using WAM https://learn.microsoft.com/en-us/azure/active-directory/develop/scenario-desktop-acquire-token-wam 2023-01-11 2 Azure SDK Releases https://azure.github.io/azure-sdk/releases/latest/all/python.html 2023-01-11 3 azure-identity 1.13.0b1 https://pypi.org/project/azure-identity/1.13.0b1/ 2023-01-11 4 WAM https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/wiki/wam 2023-01-11 5 class InteractiveBrowserCredential(InteractiveCredential) https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/azure/identity/_credentials/browser.py 2023-01-11 6 Add WAM Support to MSAL for Python, for cross-language consistency #451 https://github.com/AzureAD/microsoft-authentication-library-for-python/issues/451 2023-01-11

There's solid support for authenticating to MS's servers (with device flow and everything) in Python proper using the Microsoft Authentication Library (MSAL), including device flow, but there's nothing about CP support. CP does have an Oauth2 library, but that seems to be only for accessing Google's servers.

I mean, there is MSAL library for Python: https://github.com/AzureAD/microsoft-authentication-library-for-python/wiki. I do not think there are supported libraries for MS Graph, you'd have to go by interacting with the API directly, or depend on those libraries.

In your console app code when you initialize the MSAL client app ( IConfidentialClientApplication ) one of its properties is the token cache (AppTokenCache and UserTokenCache) which handles all the token management stuff like using the refresh token for you when you call the AcquireTokenForClient method. Read more here

# Title URL Accessed-On 1 Desktop app that calls web APIs: Acquire a token using WAM https://learn.microsoft.com/en-us/azure/active-directory/develop/scenario-desktop-acquire-token-wam 2023-01-11 2 Azure SDK Releases https://azure.github.io/azure-sdk/releases/latest/all/python.html 2023-01-11 3 azure-identity 1.13.0b1 https://pypi.org/project/azure-identity/1.13.0b1/ 2023-01-11 4 WAM https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/wiki/wam 2023-01-11 5 class InteractiveBrowserCredential(InteractiveCredential) https://github.com/Azure/azure-sdk-for-python/blob/main/sdk/identity/azure-identity/azure/identity/_credentials/browser.py 2023-01-11 6 Add WAM Support to MSAL for Python, for cross-language consistency #451 https://github.com/AzureAD/microsoft-authentication-library-for-python/issues/451 2023-01-11

For end to end testing, you can setup test accounts, test applications or even separate directories. Username and passwords can be deployed via the Continuous Integration pipeline (e.g. secret build variables in Azure DevOps). Another strategy is to keep test credentials in KeyVault and configure the machine that runs the tests to access KeyVault, for example by installing a certificate. Feel free to use MSAL's strategy for accessing KeyVault. See more info about Testing an app using MSAL here and video about UI testing Azure AD protected single page applications with Cypress.

MauiApps is where you'll find the app in this rather large repository.

Given https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/issues/3033

Fore query "cannot persist Microsoft authentication token cache securely!" (with quotes) Google returns single result, written in Chinese. Luckily I opened that Chinese result and spotted link to that issue.

duck.com does find the issue at hand.

I mean GitHub is no small site, but somehow I expected that Google will find my ANY public string on the internet.

ADAL is the older package now, and MSAL.NET is the latest library they're pushing for publish (Azure.Identity is still being worked on and is pushed for internal SDK usage from what I can tell, but this is what I primarily use due to easy code).

I'm using MSAL.NET and the library API automatically refreshes the token, if needed, when the token is silently acquired.

The article "MSAL.NET or Microsoft.Identity.Web" might be helpful: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet/wiki/MSAL.NET-or-Microsoft.Identity.Web

Are you using MSAL.NET? I've recently done this for a proof-of-concept app in Forms... Look at this sample.

have you looked into using MSAL 2.0? This would be a good start