Discover whether this is a federated user

Discover whether this is a federated user

Auth using a PRT emulating the AAD Brokerplugin (WAM) client

Converts the object to a dict

Converts the object to a dict

Authenticate as an agent identity user, given the blueprint assertion and the agent assertion Similar to OBO flow but with some extra

Authenticate as an agent identity user, given the blueprint assertion and the agent assertion (v2 endpoint)

Authenticate with a client id + secret or assertion Essentially an implementation of the oauth2 client credentials grant on the v1 au

Authenticate with a client id + secret or assertion Essentially an implementation of the oauth2 client credentials grant on the v2 au

Authenticate with device code flow Native version without adal

Authenticate with device code flow Native version without adal

Authenticate with device code flow Native version without adal

Authenticate using user w/ username + password in federated environments This doesn't work for users or tenants that have multi-facto

Authenticate using user w/ username + password in federated environments This doesn't work for users or tenants that have multi-facto

Authenticate using user w/ username + password. This doesn't work for users or tenants that have multi-factor authentication required

Authenticate using user w/ username + password. This doesn't work for users or tenants that have multi-factor authentication required

Encrypted code redemption. Like normal code flow but requires session key to decrypt response.

Perform FIDO authentication with Entra ID Args: challenge: Challenge from Entra ID (base64url string or raw bytes)

Authenticate with a PRT cookie, optionally re-signing the cookie if a key is given

Authenticate with a refresh token plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementatio

Authenticate with a refresh token plus optional secret in case of a non-public app (authorization grant) Native ROADlib implementatio

Returns a copy of a `pd.DataFrame` with additional columns for a given datetime field. Parameters ---------- df : pd.

Create app for unit tests

Create attestation object for credential registration Args: rp_id_hash: SHA256 hash of RP ID (32 bytes) flag

Create attested credential data for registration Args: aaguid: 16-byte AAGUID (authenticator identifier) cre

Create authenticator data structure for assertion Args: rp_id: Relying party ID (e.g., "login.microsoft.com")

Generate a new software passkey and save it to a .rtpk file Args: passkey_file: Path to save the .rtpk file (should end

Use ECDH with transport key to calculate the derived key using Concat KDF. Then decrypt response using this key.

Decrypt KeePass file

Delete the device from Azure ID. Requires client cert auth

Detect bloodhound config, which is stored in appData. OS dependent according to https://electronjs.org/docs/api/app#appgetpathname

Async db dumphelper for multiple linked objects (returned as a list)

Async db dumphelper for multiple linked objects (returned as a list)

Async db dumphelper for multiple linked objects (returned as a list)

Encode RSA public key in COSE format for attestation Returns: bytes: CBOR-encoded COSE key

Finder usernamemixed endpoint on the federation server

Finder usernamemixed endpoint on the federation server

* Formats Azure resource type for display * @param resourceType The resource type from the scope * @returns Human-readable resource type

Create a WebAuthnClient instance from a software passkey file Args: passkey_file: Path to the .rtpk file Return

Create a WebAuthnClient instance from a software passkey file Args: passkey_file: Path to the .rtpk file Return

Generate assertion in the format that ACS expects Requires certificate for app based auth to be loaded