powerautomate-mcp 0.7.6 → 0.7.8

package/dist/index.js

@@ -14894,13 +14894,38 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
         `Silent token acquisition failed for scopes: ${mutableScopes.join(", ")}. Resource may not be registered in the app registration. Re-run --setup to update permissions.`
       );
     }
+    let emptyUserCodeDetected = false;
     try {
       logger.info("Starting device code authentication flow");
       const deviceCodeRequest = {
         scopes: mutableScopes,
         deviceCodeCallback: (response) => {
+          const url = response.verificationUri || "https://microsoft.com/devicelogin";
+          const code = response.userCode || "(code missing)";
+          logger.info(
+            {
+              hasMessage: !!response.message,
+              hasUserCode: !!response.userCode,
+              hasVerificationUri: !!response.verificationUri,
+              expiresIn: response.expiresIn,
+              interval: response.interval
+            },
+            "Device-code response received"
+          );
+          if (!response.userCode) {
+            emptyUserCodeDetected = true;
+            logger.error(
+              "Device-code response is missing userCode \u2014 tenant likely blocks device-code flow"
+            );
+          } else if (!response.message) {
+            logger.warn(
+              { userCode: code, verificationUri: url },
+              "Device-code response missing 'message' field \u2014 using synthesized fallback"
+            );
+          }
+          const display = response.message || `To sign in, open ${url} in a browser on any device and enter the code ${code} to authenticate.`;
           console.log("");
-          console.log(`  \x1B[36m?\x1B[0m ${response.message}`);
+          console.log(`  \x1B[36m?\x1B[0m ${display}`);
           console.log("");
           console.log(`  \x1B[33m\u26A0\x1B[0m  SECURITY: Do not share this code. It expires in ${Math.floor((response.expiresIn ?? 900) / 60)} minutes.`);
           console.log("");
@@ -14920,6 +14945,12 @@ async function createDeviceCodeAuthProvider(config, silentOnly = false) {
       if (err instanceof AuthenticationError) {
         throw err;
       }
+      if (emptyUserCodeDetected) {
+        throw new AuthenticationError(
+          `Device-code flow returned no usable code from your tenant. This typically means one of: (1) your tenant blocks device-code flow via a Conditional Access policy \u2014 ask your tenant admin to allow device-code grants for this app, (2) the app registration is missing 'Allow public client flows' \u2014 set it under Authentication > Advanced settings in the Azure Portal and re-run --setup, or (3) a corporate proxy is stripping OAuth fields from the response \u2014 try a direct internet connection to confirm. Underlying MSAL error: ${err instanceof Error ? err.message : String(err)}`,
+          err
+        );
+      }
       throw new AuthenticationError(
         `Failed to authenticate: ${err instanceof Error ? err.message : String(err)}`,
         err