Async db dumphelper for multiple linked objects (returned as a list)

Given a tag name without any prefix, this function returns a list of the raw content inside this tag as-is. >>> findall_content("<ns0:fo

Get desktop SSO token either with plain username and password, or with a Kerberos auth token

Get the kid (key ID) for the given key from a file

Request server challenge (nonce) to use with a PRT Returns Nonce as a dict {'Nonce':data}

Request server challenge (nonce) to use with a PRT Returns Nonce as a string

Get tokens based on the arguments specified. Expects args to be generated from get_sub_argparse

Check whether MFA enforcement is set

Load private key only (to use as transport key) Optionally load it as transport key only and not as device key to support separate tr

Translate resource URI aliases

Save PRT data to file

Sets custom headers to include in all HTTP requests

Force NGC MFA during auth

Auth using a PRT emulating the AAD Brokerplugin client on MacOS (and Android/etc) Uses PRT protocol v3

Auth using a PRT, emulating the broker client on MacOS with Secure Enclave stored EC device key. Uses PRT protocol v4

Authenticate with device code flow Native version without adal

Authenticate on-behalf-of a user, providing their token plus a middle tier app client id + secret (client secret or certificate based

Authenticate on-behalf-of a user, providing their token plus a middle tier app client id + secret (client secret or certificate based

Authenticate using user w/ username + password. This doesn't work for users or tenants that have multi-factor authentication required

Authenticate with Desktop SSO token

KDF version 2 PRT auth

Authenticate with a SAML token from the Federation Server Native ROADlib implementation without adal requirement

Authenticate with a SAML token from the Federation Server Native ROADlib implementation without adal requirement

Authenticate with a SAML token from the Federation Server Native ROADlib implementation without adal requirement This functio

Authenticate with a SAML token from the Federation Server Native ROADlib implementation without adal requirement This functio

Small sanity check to see if the specified database exists. Otherwise SQLAlchemy creates it without data and throws errors later, which does

Close aiohttp client session

Create client data JSON matching Microsoft's format Args: challenge: Challenge from server (will be base64url encoded if

Create a key for Windows Hello, saving it to a file

Convert a key (or certificate) to JWK public numbers https://www.rfc-editor.org/rfc/rfc7517

Decrypt an encrypted authentication response, using the derived key

Async db dumphelper for multiple linked objects (returned as a list)

Async db dumphelper for objects that are returned as single objects (direct values)

* Formats an individual approver based on their type * @param approver The approver object * @returns Formatted approver string

Generate a secret for PKCE

Request token with ACS

Generate a credential ID based on the public key Uses SHA256 hash of the public key, similar to how ROADtools calculates kid

Get object from KeePass file

Get PKCE challenge (sha256 hash) of the generated secret

Returns {"address": "https://...", "action": "the soapAction value"}

Create encryption cipher, either salsa20 or chacha20

Load Windows Hello key from file

Main plugin logic. Simply connects to both databases and transforms the data

Parse compact JWE according to https://datatracker.ietf.org/doc/html/rfc7516#section-3.1

Request a token (access / refresh / PRT) using a payload signed with the device key from the secure enclave. Uses PRT Protocol versio

Request a token (access / refresh / PRT) using a payload signed with the PRT session key.

Request a token (access / refresh / PRT) using a payload signed with the PRT session key.

Wrapper around requests.post to set all the options uniformly

Wrapper for login with software based FIDO key (WHFB/Passkey)

Wrapper for plain login but with redirect URL rewrite support

Wrapper for plain login with custom user agent (requires interception to change)

Selenium login with PRT injection.