machineconfig 5.15__py3-none-any.whl → 7.98__py3-none-any.whl

machineconfig/setup_mac/ssh/openssh_setup.sh

@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+
+# 🔐 OpenSSH Setup for macOS
+# This script sets up SSH configuration and permissions on macOS
+
+echo "🔐 Starting OpenSSH setup for macOS..."
+
+# ✅ SSH is built-in on macOS (OpenSSH comes pre-installed)
+echo "✅ OpenSSH is pre-installed on macOS"
+
+# 📁 Create SSH directory with correct permissions
+echo "📁 Setting up SSH directory..."
+mkdir -p ~/.ssh
+chmod 700 ~/.ssh
+echo "✅ SSH directory created with correct permissions (700)"
+
+# 📝 Create authorized_keys file if it doesn't exist
+if [ ! -f ~/.ssh/authorized_keys ]; then
+    touch ~/.ssh/authorized_keys
+    chmod 600 ~/.ssh/authorized_keys
+    echo "✅ Created authorized_keys file"
+else
+    echo "✅ authorized_keys file already exists"
+    chmod 600 ~/.ssh/authorized_keys
+fi
+
+# 🔑 Create SSH keys if they don't exist
+if [ ! -f ~/.ssh/id_rsa ]; then
+    echo "🔑 Generating SSH keys (RSA)..."
+    ssh-keygen -t rsa -b 4096 -f ~/.ssh/id_rsa -N "" -C "$(whoami)@$(hostname)"
+    echo "✅ SSH RSA keys generated: ~/.ssh/id_rsa"
+else
+    echo "✅ SSH keys already exist"
+fi
+
+# 🔐 Create Ed25519 keys (modern alternative)
+if [ ! -f ~/.ssh/id_ed25519 ]; then
+    echo "🔑 Generating SSH keys (Ed25519)..."
+    ssh-keygen -t ed25519 -f ~/.ssh/id_ed25519 -N "" -C "$(whoami)@$(hostname)"
+    echo "✅ SSH Ed25519 keys generated: ~/.ssh/id_ed25519"
+else
+    echo "✅ SSH Ed25519 keys already exist"
+fi
+
+# 🔧 Configure SSH config file for convenience
+SSH_CONFIG="$HOME/.ssh/config"
+if [ ! -f "$SSH_CONFIG" ]; then
+    echo "📝 Creating SSH config file..."
+    cat > "$SSH_CONFIG" << 'EOF'
+# SSH Config File for macOS
+# Add your remote hosts below
+
+# Example host configuration:
+# Host myserver
+#     HostName example.com
+#     User username
+#     Port 22
+#     IdentityFile ~/.ssh/id_ed25519
+#     IdentityFile ~/.ssh/id_rsa
+
+# Global settings
+Host *
+    AddKeysToAgent yes
+    UseKeychain yes
+    IdentityFile ~/.ssh/id_ed25519
+    IdentityFile ~/.ssh/id_rsa
+    ServerAliveInterval 60
+EOF
+    chmod 600 "$SSH_CONFIG"
+    echo "✅ SSH config file created: $SSH_CONFIG"
+else
+    echo "✅ SSH config file already exists"
+fi
+
+# 🔒 Ensure correct file permissions
+echo "🔒 Setting correct SSH file permissions..."
+chmod 700 ~/.ssh
+chmod 600 ~/.ssh/authorized_keys 2>/dev/null || true
+chmod 600 ~/.ssh/id_rsa 2>/dev/null || true
+chmod 644 ~/.ssh/id_rsa.pub 2>/dev/null || true
+chmod 600 ~/.ssh/id_ed25519 2>/dev/null || true
+chmod 644 ~/.ssh/id_ed25519.pub 2>/dev/null || true
+chmod 600 ~/.ssh/config 2>/dev/null || true
+echo "✅ SSH file permissions configured correctly"
+
+# ℹ️ Display SSH key information
+echo ""
+echo "📋 SSH Setup Summary:"
+echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+echo "SSH Directory: ~/.ssh"
+echo "SSH Config: ~/.ssh/config"
+echo ""
+echo "Available SSH Keys:"
+if [ -f ~/.ssh/id_rsa.pub ]; then
+    echo "  • RSA Key: ~/.ssh/id_rsa"
+fi
+if [ -f ~/.ssh/id_ed25519.pub ]; then
+    echo "  • Ed25519 Key: ~/.ssh/id_ed25519"
+fi
+echo ""
+echo "💡 Next Steps:"
+echo "  1. View your public key:"
+echo "     cat ~/.ssh/id_ed25519.pub  (or id_rsa.pub)"
+echo "  2. Add it to your GitHub/GitLab/server authorized_keys"
+echo "  3. Test connection:"
+echo "     ssh -v your_server"
+echo "  4. Configure hosts in ~/.ssh/config for easy access"
+echo ""
+echo "📚 Learn more about SSH:"
+echo "  • man ssh"
+echo "  • man ssh-keygen"
+echo "  • man ssh_config"
+echo ""
+echo "✅ OpenSSH setup complete!"

machineconfig/setup_mac/uv.sh

@@ -0,0 +1,36 @@
+#!/usr/bin/env bash
+
+# Install or update uv (universal version manager) on macOS
+# Mirrors Linux uv installer but adapts PATH and locations for mac
+
+set -euo pipefail
+
+UV_BIN="$HOME/.local/bin/uv"
+
+if [ ! -f "$UV_BIN" ]; then
+    echo "📦 uv binary not found — installing uv to $HOME/.local/bin..."
+    mkdir -p "$HOME/.local/bin"
+    curl -LsSf https://astral.sh/uv/install.sh | sh
+    echo "✅ uv installed to $UV_BIN"
+else
+    echo "🔄 uv binary found — attempting self-update..."
+    "$UV_BIN" self update || true
+fi
+
+# Ensure local bin is in PATH for this run
+export PATH="$HOME/.local/bin:$PATH"
+
+if ! command -v uv &> /dev/null; then
+    echo "⚠️ uv not found in PATH even after install; add \"$HOME/.local/bin\" to your shell profile"
+else
+    echo "🔧 uv available: $(command -v uv)"
+fi
+
+# Example uv usage: ensure Python 3.14 is available (adjust as needed)
+if command -v uv &> /dev/null; then
+    echo "📥 Ensuring Python 3.14 via uv (if supported)"
+    # uv may manage various runtimes; this is an example command and will be skipped gracefully if unsupported
+    uv python install 3.14 || true
+fi
+
+echo "✅ uv setup complete"

machineconfig/setup_windows/__init__.py

@@ -0,0 +1,11 @@
+
+from pathlib import Path
+
+UV = Path(__file__).parent.joinpath("uv.ps1")
+DOCKER = Path(__file__).parent.joinpath("others/docker.ps1")
+OBS = Path(__file__).parent.joinpath("others/obs.ps1")
+POWER_OPTIONS = Path(__file__).parent.joinpath("others/power_options.ps1")
+SSH_SERVER = Path(__file__).parent.joinpath("ssh/openssh_server.ps1")
+INTERACTIVE = Path(__file__).parent.joinpath("web_shortcuts/interactive.ps1")
+LIVE = Path(__file__).parent.joinpath("web_shortcuts/live_from_github.ps1")
+

machineconfig/setup_windows/others/power_options.ps1

@@ -0,0 +1,7 @@
+
+# power and sleep options.
+Powercfg /Change monitor-timeout-ac 60
+Powercfg /Change monitor-timeout-dc 0
+Powercfg /Change standby-timeout-ac 0
+Powercfg /Change standby-timeout-dc 0
+

machineconfig/setup_windows/ssh/add-sshkey.ps1

@@ -0,0 +1,29 @@
+
+# This script adds a public key to the authorized_keys file for the sshd service
+# as a result, a remote can connet to the machine if they got the corresponding private key (identity).
+
+# https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_keymanagement
+# http://woshub.com/using-ssh-key-based-authentication-on-windows/
+
+$ErrorActionPreference = "Stop"
+$sshd_dir = "$env:ProgramData\ssh"
+$sshfile = "$env:USERPROFILE\.ssh\pubkey.pub"  # this directory is for normal users, not admins.
+# Once they are populated, we can create administrators_authorized_keys
+
+Get-Content $sshfile >> "$sshd_dir\administrators_authorized_keys"
+# set appropirate persmissions for this file
+Set-Location $sshd_dir
+icacls administrators_authorized_keys /inheritance:r /grant "Administrators:F" /grant "SYSTEM:F"
+# Lastly, enabling public key authentication.
+$sshd_config = "$sshd_dir\sshd_config"
+(Get-Content $sshd_config) -replace '#PubkeyAuthentication', 'PubkeyAuthentication' | Out-File -encoding ASCII $sshd_config
+#(Get-Content $sshd_dir\sshd_config) -replace 'AuthorizedKeysFile __PROGRAMDATA__', '#AuthorizedKeysFile __PROGRAMDATA__' | Out-File -encoding ASCII $sshd_config
+#(Get-Content $sshd_dir\sshd_config) -replace 'Match Group administrators', '#Match Group administrators' | Out-File -encoding ASCII $sshd_config
+#cat C:\ProgramData\ssh\sshd_config
+
+# to load the fresh settings, we need to restart the service:
+Restart-Service sshd -Force
+
+#Write-Host "Use this to Login/test Now"
+#write-host ssh $env:UserName@localhost
+# debug tip: use nano editor to inspect files above, if unreadable max-text format is used, ssh won't work.

machineconfig/setup_windows/ssh/add_identity.ps1

@@ -0,0 +1,11 @@
+
+# on the side of the local machine, you need to sort out the following:
+# if the $sshfile doesn't have a standard name, you will need to explicitly specify the identity while SSHing (e.g. ssh u@s -i ~/.ssh/my_id)
+# However, this must be done every time. For permanent solutions, use .ssh/config
+
+$sshfile = "$env:USERPROFILE\.ssh\id_rsa"
+
+Set-Service ssh-agent -StartupType Manual  # allow the service to be started manually
+ssh-agent  # start the service
+ssh-add.exe $sshfile # add the key to the agent
+

machineconfig/setup_windows/ssh/openssh-server.ps1

@@ -0,0 +1,37 @@
+
+$ErrorActionPreference = "Stop"
+# ALL of the following require admin priviliages:
+Set-ExecutionPolicy Bypass
+# PowerShell.exe -ExecutionPolicy Bypass -File "C:\bypass\prompt\standard.ps1" 2>&1>$null
+
+# Install SSH-Server on a windows machine. see this one below if this one didn't work:
+# to install: winget install --Id Microsoft.OpenSSH.Preview --source winget --scope user  # from: https://github.com/PowerShell/Win32-OpenSSH/wiki/Install-Win32-OpenSSH
+# the result is installed in C:\Program Files\OpenSSH as opposed to C:\Windows\System32\OpenSSH which is the case if openssh is added as a feature/capability to windows
+# However, notice the new path is not in PATH as is the cases with system variant, so it needs to be added manually.
+# finally, ssh config files are always @ "$env:ProgramData\ssh" irrespective of installation method.
+# if ssh key is created on windows, it doesn't work on linux and gives a cryptlib error. It must be read again and saved in non DOS format.
+
+Add-WindowsCapability -Online -Name OpenSSH.Server
+Add-WindowsCapability -Online -Name OpenSSH.Client
+
+#New-NetFirewallRule -Name sshd -DisplayName 'OpenSSH SSH Server' -Enabled True -Direction Inbound -Protocol TCP -Action Allow -LocalPort 22 -Program "%WINDIR%\System32\OpenSSH\sshd.exe"
+
+# Must Enable ssh-agent before starting. But even before that, one need to update path so that same shell has access to the NEWLY added ssh program
+$env:Path = [System.Environment]::GetEnvironmentVariable("Path","Machine") + ";" + [System.Environment]::GetEnvironmentVariable("Path","User")
+
+Set-Service -Name sshd -StartupType Automatic
+#Get-Service -Name ssh-agent | Set-Service -StartupType Automatic
+#Set-Service -Name ssh-agent -StartupType Automatic
+#Start-Service ssh-agent
+# Starting the service for the first time will populate the directory with config files.
+Start-Service sshd
+
+# Next up, change default shell to powershell, becuse CMD is lame
+# following: https://github.com/PowerShell/Win32-OpenSSH/wiki/DefaultShell
+$shell = "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"  # "C:\Windows\System32\wsl.exe"
+# $shell = "C:\Program Files\PowerShell\7\pwsh.exe"  # it slows SSH down because of startup time, one can still use it by running it explicitly
+New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShell -Value $shell -PropertyType String -Force
+New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name DefaultShellCommandOption -Value "/c" -PropertyType String -Force
+
+cd ~
+mkdir .ssh -ErrorAction SilentlyContinue

machineconfig/setup_windows/uv.ps1

@@ -0,0 +1,17 @@
+
+
+if (-not (Test-Path -Path "$HOME\.local\bin\uv.exe")) {
+    Write-Output "uv binary not found, installing..."
+    powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
+} else {
+    Write-Output "uv binary found, updating..."
+    & "$HOME\.local\bin\uv.exe" self update
+}
+
+# `C:\Users\aalsaf01\.local\bin` is not on your PATH. To use installed Python executables, run `$env:PATH = "C:\Users\aalsaf01\.local\bin;$env:PATH"` or `uv python update-shell`.
+& "$env:USERPROFILE\.local\bin\uv.exe" python update-shell
+$env:Path = [System.Environment]::GetEnvironmentVariable('Path', 'Machine') + ';' + [System.Environment]::GetEnvironmentVariable('Path', 'User')
+
+# & "$HOME\.local\bin\uv.exe" python install 3.14
+uv python install 3.14
+

machineconfig/setup_windows/web_shortcuts/interactive.ps1

@@ -1,13 +1,30 @@
-Write-Host "
-🚀 ===========================================
-📦 Machine Configuration Installation Script
-============================================="
 
-Write-Host "ℹ️  If you have execution policy issues, run: Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser"
 
-Invoke-WebRequest -Uri "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/setup_windows/ve.ps1" -OutFile "ve.ps1"
-.\ve.ps1
-rm ve.ps1
+iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/setup_windows/uv.ps1").Content
+iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/scripts/windows/wrap_mcfg.ps1").Content
 
-uv run --python 3.13 --with machineconfig devops interactive
-# uv run --python 3.13 --with machineconfig https://raw.githubusercontent.com/thisismygitrepo/machineconfig/ee4f69e838e1acbb275bfb5a3d3faee23345f2a8/src/machineconfig/scripts/python/devops.py
+function devops   { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" devops $args }
+function cloud    { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" cloud $args }
+function agents   { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" agents $args }
+function sessions { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" sessions $args }
+function ftpx     { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" ftpx $args }
+function fire     { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" fire $args }
+function croshell { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" croshell $args }
+function utils    { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" utils $args }
+function terminal { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" terminal $args }
+function msearch  { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "machineconfig>=7.98" msearch $args }
+
+function d { wrap_in_shell_script devops @args }
+function c { wrap_in_shell_script cloud @args }
+function a { wrap_in_shell_script agents @args }
+function sx { wrap_in_shell_script sessions @args }
+function fx { wrap_in_shell_script ftpx @args }
+function f { wrap_in_shell_script fire @args }
+function rr { wrap_in_shell_script croshell @args }
+function u { wrap_in_shell_script utils @args }
+function t { wrap_in_shell_script terminal @args }
+function ms { wrap_in_shell_script msearch @args }
+
+Write-Host "mcfg command aliases are now defined in this PowerShell session."
+
+devops self interactive

machineconfig/setup_windows/web_shortcuts/live_from_github.ps1

@@ -0,0 +1,30 @@
+
+
+iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/setup_windows/uv.ps1").Content
+iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/scripts/windows/wrap_mcfg.ps1").Content
+
+function devops { & "$HOME\.local\bin\uvx.exe" --python 3.14 --from "git+https://github.com/thisismygitrepo/machineconfig" mcfg $args }
+
+function devops {mcfg devops @args }
+function cloud {mcfg cloud @args }
+function agents {mcfg agents @args }
+function sessions {mcfg sessions @args }
+function ftpx {mcfg ftpx @args }
+function fire {mcfg fire @args }
+function croshell {mcfg croshell @args }
+function utils {mcfg utils @args }
+function terminal {mcfg terminal @args }
+function msearch {mcfg msearch @args }
+
+function d { wrap_in_shell_script mcfg devops @args }
+function c { wrap_in_shell_script mcfg cloud @args }
+function a { wrap_in_shell_script mcfg agents @args }
+function sx { wrap_in_shell_script mcfg sessions @args }
+function fx { wrap_in_shell_script mcfg ftpx @args }
+function f { wrap_in_shell_script mcfg fire @args }
+function rr { wrap_in_shell_script mcfg croshell @args }
+function u { wrap_in_shell_script mcfg utils @args }
+function t { wrap_in_shell_script mcfg terminal @args }
+function ms { wrap_in_shell_script mcfg msearch @args }
+
+Write-Host "mcfg command aliases are now defined in this PowerShell session."

machineconfig/setup_windows/web_shortcuts/quick_init.ps1

@@ -0,0 +1,17 @@
+
+iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/setup_windows/uv.ps1").Content
+# iex (iwr "https://raw.githubusercontent.com/thisismygitrepo/machineconfig/main/src/machineconfig/scripts/windows/wrap_mcfg.ps1").Content
+
+uv tool install --upgrade  --python 3.14 machineconfig
+
+devops install --group sysabc
+
+# configs
+devops config copy-assets both
+devops config public --method copy --on-conflict overwrite-default-path --which all
+devops config shell
+devops config shell --which nushell
+
+devops install --group termabc 
+wt  # start Windows Terminal to pick up config changes
+devops install --group gui

machineconfig/utils/accessories.py

@@ -1,4 +1,3 @@
-from pathlib import Path
 from typing import Optional, Any
 
 from datetime import datetime, timezone, timedelta
@@ -72,7 +71,6 @@ def split_list[T](sequence: list[T], every: Optional[int]=None, to: Optional[int
 
 def pprint(obj: dict[Any, Any], title: str) -> None:
     from rich import inspect
-
     inspect(type("TempStruct", (object,), obj)(), value=False, title=title, docs=False, dunder=False, sort=False)
 
 
@@ -97,14 +95,18 @@ def human_friendly_dict(d: dict[str, Any]) -> dict[str, Any]:
     return result
 
 
-def get_repo_root(path: Path) -> Optional[Path]:
+def get_repo_root(path: "Path") -> Optional["Path"]:
     from git import Repo, InvalidGitRepositoryError
-
     try:
-        repo = Repo(str(path), search_parent_directories=True)
+        repo = Repo(path, search_parent_directories=True)
         root = repo.working_tree_dir
         if root is not None:
+            from pathlib import Path
             return Path(root)
     except InvalidGitRepositoryError:
         pass
     return None
+
+
+if __name__ == "__main__":
+    from pathlib import Path

machineconfig/utils/cloud/onedrive/README.md

@@ -0,0 +1,139 @@
+# OneDrive API without rclone
+
+This module provides direct OneDrive integration using Microsoft Graph API without requiring rclone.
+
+## Features
+
+- ✅ Automatic token refresh when expired
+- ✅ Persistent token storage
+- ✅ Upload/download files with progress tracking
+- ✅ Support for large file uploads (chunked)
+- ✅ Direct OAuth2 authentication setup
+
+## Quick Start
+
+### Option 1: Direct OAuth Setup (Recommended)
+
+1. **Set up Azure App Registration:**
+   - Go to [Azure Portal](https://portal.azure.com)
+   - Navigate to 'Azure Active Directory' > 'App registrations'
+   - Click 'New registration'
+   - Name: 'OneDrive API Access'
+   - Redirect URI: `http://localhost:8080/callback`
+   - Add permissions: `Files.ReadWrite.All` and `offline_access`
+
+2. **Set environment variables:**
+   ```bash
+   export ONEDRIVE_CLIENT_ID='your_client_id_here'
+   export ONEDRIVE_REDIRECT_URI='http://localhost:8080/callback'
+   ```
+
+3. **Run initial setup:**
+   ```python
+   from transaction import setup_oauth_authentication
+   setup_oauth_authentication()
+   ```
+
+### Option 2: Using existing rclone token
+
+If you already have rclone configured, the system will automatically use and refresh your existing tokens.
+
+## Usage Examples
+
+```python
+from transaction import push_to_onedrive, pull_from_onedrive
+
+# Upload a file
+success = push_to_onedrive('/path/to/local/file.pdf', '/Documents/file.pdf')
+
+# Download a file
+success = pull_from_onedrive('/Documents/file.pdf', '/path/to/local/downloaded.pdf')
+```
+
+## Token Management
+
+### Automatic Token Refresh
+
+The system automatically handles token refresh:
+
+```python
+from transaction import get_access_token
+
+# This will automatically refresh if expired
+token = get_access_token()
+```
+
+### Manual Token Operations
+
+```python
+from transaction import refresh_access_token, save_token_to_file, load_token_from_file
+
+# Manually refresh token
+new_token = refresh_access_token()
+
+# Save token to file
+save_token_to_file(token_data)
+
+# Load token from file
+token_data = load_token_from_file()
+```
+
+## How Token Renewal Works
+
+1. **Automatic Detection**: The system checks token expiry before each API call
+2. **Refresh Attempt**: If expired, it automatically uses the refresh token to get a new access token
+3. **Persistent Storage**: New tokens are saved to `~/.onedrive_token.json` for future use
+4. **Fallback**: If refresh fails, it provides clear instructions for manual intervention
+
+## No rclone Required
+
+This implementation eliminates the need for rclone by:
+
+- Using Microsoft Graph API directly
+- Implementing OAuth2 flow natively
+- Managing token lifecycle automatically
+- Providing persistent token storage
+
+## Error Handling
+
+The system gracefully handles various scenarios:
+
+- Expired tokens → Automatic refresh
+- Network errors → Detailed error messages
+- Missing permissions → Clear setup instructions
+- Invalid tokens → Step-by-step recovery guide
+
+## Files Created
+
+- `~/.onedrive_token.json`: Encrypted token storage (chmod 600)
+- Token is automatically loaded on import
+
+## Security
+
+- Tokens are stored with restrictive permissions (600)
+- Client secrets are optional (public client mode supported)
+- Refresh tokens are securely managed
+- No sensitive data in logs
+
+## Troubleshooting
+
+### Token Refresh Failed
+```python
+# Try manual refresh
+from transaction import refresh_access_token
+token = refresh_access_token()
+
+# Or re-run OAuth setup
+from transaction import setup_oauth_authentication
+setup_oauth_authentication()
+```
+
+### Permission Errors
+Make sure your Azure app has the correct permissions:
+- `Files.ReadWrite.All` (Delegated)
+- `offline_access` (Delegated)
+
+### Network Issues
+Check your firewall allows connections to:
+- `https://login.microsoftonline.com`
+- `https://graph.microsoft.com`