Returns the authority URL for the tenant specified, or the common one if no tenant was specified

Wrapper around requests.post to set all the options uniformly

Convert /token reply from Azure to ADAL compatible object

Unpack the multipart batch on the first read and cache it.

Overrides user agent (accepts aliases)

Request a Continuous Access Evaluation token

Sets client ID to use (accepts aliases)

Request server challenge (nonce) to use with a PRT Returns Nonce as string

Wrapper around aiohttp.post to set all the options uniformly

Sets resource URI to use (accepts aliases)

Sets scope to use (accepts aliases for resource part)

Sets Origin header to use If the value "ru" is used, we take it from the redirect URL

Decrypt an encrypted authentication response, which is a JWE encrypted using the sessionkey

Authenticate with a client id + secret or assertion Essentially an implementation of the oauth2 client credentials grant on the v1 au

Authenticate with a client id + secret or assertion Essentially an implementation of the oauth2 client credentials grant on the v2 au

Wrapper to handle failures in parsing policy body better

Translate client ID aliases

Authenticate with a refresh token plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementatio

Get valid redirect URLs for specified client. Interactive means a https URL is preferred. In practice roadtx often prefers non-interactive UR

Load webdriver based on service, which is either from selenium or selenium-wire if interception is requested

Handle autotoken for the requested resource based on the input tokenfile

Wrapper around requests.get to set all the options uniformly

KDF version 2 cookie construction

Convert a key (or certificate) to RSA key blob https://docs.microsoft.com/en-us/windows/win32/api/bcrypt/ns-bcrypt-bcrypt_rsakey_blob

Load PRT from disk

Wrap the request payload in a JWT and sign this using the device cert / key

Force MFA during auth

Set PRT parameters in the correct internal format

Authenticate with a code plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementation without

Authenticate with a code plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementation without

Authenticate with a refresh token plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementatio

Build authorize URL. Can be v2 by specifying scope, otherwise defaults to v1 with resource

Try to resolve a valid redirect URI for a client, using roadtx lookup if available. Falls back to the native client redirect.

Load a device certificate from disk

Calculate the derived key given a session key and optional context using KBKDFHMAC

Derived key calculation v2, which uses the JWT body

Convert a key (or certificate) to JWK public numbers https://www.rfc-editor.org/rfc/rfc7517

Load a certificate from disk for usage with application auth

Wrap the request payload in a JWT and sign this using the device cert / key

Wrapper around aiohttp.get to set all the options uniformly

Selenium based login with optional autofill of whatever is provided

Authenticate with a PRT and given context/derived key Uses KDF version 1 (legacy)

Decrypt JWE data structure with transport key to obtain session key

Get password plus OTP from KeePass file

Get an argparse subparser for authentication

Check whether the redirect URL has a custom scheme In this case we try to replace this during the response since Firefox otherwise bu

Add desired claim to authentication flow, for example CAE or MFA

Authenticate using user w/ username + password. This doesn't work for users or tenants that have multi-factor authentication required

Authenticate with a PRT cookie, optionally re-signing the cookie if a key is given