microsoft-agents-authentication-msal 0.9.0.dev7__tar.gz → 0.9.0.dev9__tar.gz

{microsoft_agents_authentication_msal-0.9.0.dev7/microsoft_agents_authentication_msal.egg-info → microsoft_agents_authentication_msal-0.9.0.dev9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: microsoft-agents-authentication-msal
-Version: 0.9.0.dev7
+Version: 0.9.0.dev9
 Summary: A msal-based authentication library for Microsoft Agents
 Author: Microsoft Corporation
 License-Expression: MIT
@@ -15,7 +15,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: microsoft-agents-hosting-core==0.9.0.dev7
+Requires-Dist: microsoft-agents-hosting-core==0.9.0.dev9
 Requires-Dist: msal>=1.34.0
 Requires-Dist: requests>=2.32.3
 Dynamic: license-file

microsoft_agents_authentication_msal-0.9.0.dev9/VERSION.txt

@@ -0,0 +1 @@
+0.9.0.dev9

{microsoft_agents_authentication_msal-0.9.0.dev7 → microsoft_agents_authentication_msal-0.9.0.dev9}/microsoft_agents/authentication/msal/msal_auth.py

@@ -42,8 +42,6 @@ async def _async_acquire_token_for_client(msal_auth_client, *args, **kwargs):
 
 class MsalAuth(AccessTokenProviderBase):
 
-    _client_credential_cache = None
-
     def __init__(self, msal_configuration: AgentAuthConfiguration):
         """Initializes the MsalAuth class with the given configuration.
 
@@ -211,16 +209,38 @@ class MsalAuth(AccessTokenProviderBase):
             )
         else:
             authority = MsalAuth._resolve_authority(self._msal_configuration, tenant_id)
+            client_credential = None
 
-            if self._client_credential_cache:
-                logger.info("Using cached client credentials for MSAL authentication.")
-                pass
-            elif self._msal_configuration.AUTH_TYPE == AuthTypes.client_secret:
-                self._client_credential_cache = self._msal_configuration.CLIENT_SECRET
+            if self._msal_configuration.AUTH_TYPE == AuthTypes.client_secret:
+                client_credential = self._msal_configuration.CLIENT_SECRET
             elif self._msal_configuration.AUTH_TYPE == AuthTypes.certificate:
-                self._client_credential_cache = {
+                client_credential = {
                     "private_key_pfx_path": self._msal_configuration.CERT_PFX_FILE,
                 }
+            elif self._msal_configuration.AUTH_TYPE == AuthTypes.federated_credentials:
+                mi_client = ManagedIdentityClient(
+                    UserAssignedManagedIdentity(
+                        client_id=self._msal_configuration.FEDERATED_CLIENT_ID
+                    ),
+                    http_client=Session(),
+                )
+
+                def get_assertion() -> str:
+                    result = mi_client.acquire_token_for_client(
+                        resource="api://AzureADTokenExchange"
+                    )
+                    if "access_token" not in result:
+                        logger.error(
+                            f"Failed to acquire token for federated credentials: {result}"
+                        )
+                        raise ValueError(
+                            authentication_errors.FailedToAcquireToken.format(
+                                str(result)
+                            )
+                        )
+                    return result["access_token"]
+
+                client_credential = {"client_assertion": get_assertion}
             else:
                 logger.error(
                     f"Unsupported authentication type: {self._msal_configuration.AUTH_TYPE}"
@@ -232,7 +252,7 @@ class MsalAuth(AccessTokenProviderBase):
             return ConfidentialClientApplication(
                 client_id=self._msal_configuration.CLIENT_ID,
                 authority=authority,
-                client_credential=self._client_credential_cache,
+                client_credential=client_credential,
             )
 
     def _client_rep(

{microsoft_agents_authentication_msal-0.9.0.dev7 → microsoft_agents_authentication_msal-0.9.0.dev9/microsoft_agents_authentication_msal.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: microsoft-agents-authentication-msal
-Version: 0.9.0.dev7
+Version: 0.9.0.dev9
 Summary: A msal-based authentication library for Microsoft Agents
 Author: Microsoft Corporation
 License-Expression: MIT
@@ -15,7 +15,7 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: microsoft-agents-hosting-core==0.9.0.dev7
+Requires-Dist: microsoft-agents-hosting-core==0.9.0.dev9
 Requires-Dist: msal>=1.34.0
 Requires-Dist: requests>=2.32.3
 Dynamic: license-file

microsoft_agents_authentication_msal-0.9.0.dev9/microsoft_agents_authentication_msal.egg-info/requires.txt

@@ -0,0 +1,3 @@
+microsoft-agents-hosting-core==0.9.0.dev9
+msal>=1.34.0
+requests>=2.32.3

microsoft_agents_authentication_msal-0.9.0.dev7/VERSION.txt

@@ -1 +0,0 @@
-0.9.0.dev7

microsoft_agents_authentication_msal-0.9.0.dev7/microsoft_agents_authentication_msal.egg-info/requires.txt

@@ -1,3 +0,0 @@
-microsoft-agents-hosting-core==0.9.0.dev7
-msal>=1.34.0
-requests>=2.32.3