msoauth 1.0.0

A simple Microsoft OAuth2 client
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

# msoauth

<!--toc:start-->
- [msoauth](#msoauth)
  - [Features](#features)
  - [Requirements](#requirements)
  - [Installation](#installation)
  - [Configuration](#configuration)
  - [Usage](#usage)
  - [Integration Example (NeoMutt)](#integration-example-neomutt)
  - [License](#license)
<!--toc:end-->

A simple CLI tool for retrieving, refreshing, and printing Microsoft OAuth2
tokens via the Device Code flow. Useful for tools like NeoMutt with
OAuth2-based accounts.

## Features

- Authenticates using Microsoft OAuth2 Device Code flow
- Automatically saves/refreshes access tokens
- Prints access token for use in scripts or email clients
- Logs activity via tracing
- Friendly error messages and self-healing default mode

## Requirements

- Rust (use rustup to install)
- A registered Azure AD app with the following:
  - client_id
  - tenant_id
  - client_secret
  - Scopes (e.g. <https://graph.microsoft.com/.default>)

## Installation

```bash
cargo install --path .
```

## Configuration

Create the file:

```bash
~/.config/msoauth/config.toml
```

With the contents:

```toml
client_id = "YOUR_CLIENT_ID"
client_secret = "YOUR_CLIENT_SECRET"
tenant_id = "YOUR_TENANT_ID"
scope = "https://graph.microsoft.com/.default"
```

To obtain these values:

1. Go to [https://portal.azure.com](https://portal.aszure.com)
2. Navigate to **Azure Active Directory > App Registrations**
3. Register a new app
4. Under **Overview**, copy the `Application (cliend) ID` and
`Directory (tenant) ID`.
5. Under **Certificates & secrets**, create a new client secret.
6. Under **API Permissions**. Add `Microsoft Graph > Delegated | User.Read` or
other needed scopes.

## Usage

```bash
msoauth --login         # Start device login flow
msoauth --refresh       # Refresh the token if expired
msoauth --print-token   # Print current access token (refresh if needed)
msoauth --clear-token   # Delete the saved token file
msoauth                 # Default, try refresh, fallback to login
```

Token is stored at:

```bash
~/.config/neomutt/token.json
```

## Integration Example (NeoMutt)

```bash
set imap_pass="`msoauth --print-token`"
```

## License

MIT