Async based MSAL helper for aiohttp - aiohttp_msal Python library
Authorization Code Flow Helper. Learn more about auth-code-flow at https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow
Async based OAuth using the Microsoft Authentication Library (MSAL) for Python.
Blocking MSAL functions are executed in the executor thread. Should be useful until such time as MSAL Python gets a true async version.
Tested with MSAL Python 1.21.0 onward - MSAL Python docs
AsycMSAL class
The AsyncMSAL class wraps the behavior in the following example app https://github.com/Azure-Samples/ms-identity-python-webapp/blob/master/app.py#L76
It is responsible to manage tokens & token refreshes and as a client to retrieve data using these tokens.
Acquire the token
Firstly you should get the tokens via OAuth
-
initiate_auth_code_flowreferernceThe caller is expected to:
- somehow store this content, typically inside the current session of the server,
- guide the end user (i.e. resource owner) to visit that auth_uri, typically with a redirect
- and then relay this dict and subsequent auth response to acquire_token_by_auth_code_flow().
Step 1 and part of Step 3 is stored by this class in the aiohttp_session
-
acquire_token_by_auth_code_flowreferernce
Use the token
Now you are free to make requests (typically from an aiohttp server)
session = await get_session(request)
aiomsal = AsyncMSAL(session)
async with aiomsal.get("https://graph.microsoft.com/v1.0/me") as res:
res = await res.json()
Example web server
Complete routes can be found in routes.py
Start the login process
@ROUTES.get("/user/login")
async def user_login(request: web.Request) -> web.Response:
"""Redirect to MS login page."""
session = await new_session(request)
redir = AsyncMSAL(session).build_auth_code_flow(
redirect_uri=get_route(request, URI_USER_AUTHORIZED)
)
return web.HTTPFound(redir)
Acquire the token after being redirected back to the server
@ROUTES.post(URI_USER_AUTHORIZED)
async def user_authorized(request: web.Request) -> web.Response:
"""Complete the auth code flow."""
session = await get_session(request)
auth_response = dict(await request.post())
aiomsal = AsyncMSAL(session)
await aiomsal.async_acquire_token_by_auth_code_flow(auth_response)
Helper methods
-
@ROUTES.get("/user/photo")Serve the user's photo from their Microsoft profile
-
get_user_infoGet the user's email and display name from MS Graph
-
get_manager_infoGet the user's manager info from MS Graph
Redis tools to retrieve session tokens
from aiohttp_msal import ENV, AsyncMSAL
from aiohttp_msal.redis_tools import get_session
def main()
# Uses the redis.asyncio driver to retrieve the current token
# Will update the token_cache if a RefreshToken was used
ses = asyncio.run(get_session(MYEMAIL))
client = GraphClient(ses.get_token)
# ...
# use the Graphclient
Development
uv sync --all-extras
uv tool install ruff
uv tool install prek
prek install # add pre-commit hooks
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file aiohttp_msal-1.1.4.tar.gz.
File metadata
- Download URL: aiohttp_msal-1.1.4.tar.gz
- Upload date:
- Size: 15.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
uv/0.10.2 {"installer":{"name":"uv","version":"0.10.2","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
0cd83ba8d51c8e6fd5881609a43b9a9086d405b781b7a7d6d82e69f450089f98
|
|
| MD5 |
480a4577e7ef085f12b4375466862ada
|
|
| BLAKE2b-256 |
a7efbfc792625df13d26c8f3f29495baa4f76bcecaf3669f8eacfdab54646c15
|
File details
Details for the file aiohttp_msal-1.1.4-py3-none-any.whl.
File metadata
- Download URL: aiohttp_msal-1.1.4-py3-none-any.whl
- Upload date:
- Size: 17.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
uv/0.10.2 {"installer":{"name":"uv","version":"0.10.2","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
829a7406900ab5705bf9d6b7672bc1da131eb8108bb0bdc35977aa9b53302a12
|
|
| MD5 |
3c84c11fb0ae863742063bf0031c8631
|
|
| BLAKE2b-256 |
91296ef22c65e11ecf745b8da79542d18624bd90f8e83dbe88acefef4002df88
|
