Azure passwordless authentication method

az_cli_jwt.py

from msal import PublicClientApplication

# Azure CLI's well-known public client ID
client_id = "04b07795-8ddb-461a-bbee-02f9e1bf7b46"
tenant_id = "your-tenant-id"  # Replace with your actual tenant ID

app = PublicClientApplication(
    client_id=client_id,
    authority=f"https://login.microsoftonline.com/{tenant_id}"
)

print("🔐 Starting authentication...")
print("Browser will open automatically\n")

# Minimal parameters - let MSAL handle everything
result = app.acquire_token_interactive(
    scopes=["User.Read"]
)

if "access_token" in result:
    print("✅ Authentication successful!")
    print(f"Access Token: {result['access_token'][:50]}...")
    
    # Test the token
    import requests
    headers = {"Authorization": f"Bearer {result['access_token']}"}
    response = requests.get("https://graph.microsoft.com/v1.0/me", headers=headers)
    
    if response.status_code == 200:
        profile = response.json()
        print(f"\n✅ Token works!")
        print(f"Your name: {profile.get('displayName')}")
        print(f"Your email: {profile.get('mail') or profile.get('userPrincipalName')}")
else:
    print(f"❌ Authentication failed!")
    print(f"Error: {result.get('error')}")
    print(f"Description: {result.get('error_description')}")
    print(f"\nFull response: {result}")