A minimal sample app using ADAL.JS and plain old vanilla JavaScript to obtain an access token from Azure Active Directory and use that access token to make an API request. In this case, the API we're requesting a token for is the Microsoft Graph API, which is used to retrieve the signed-in user's basic profile.
You can see (and test) this live at: https://bl.ocks.org/psignoret/raw/50e88652ae5cb6cc157c09857e3ba87f/
| # Adds, lists or removes owners of Azure AD Application and ServicePrincipal objects | |
| <# | |
| Examples: | |
| # Add bob@contoso.com as owner to both app and service principal | |
| .\ManageAppAndServicePrincipalOwner.ps1 -Add "bob@contoso.com" -Application -AppId "e1d83a3c-fea5-4315-9591-8d9f185d2d56" | |
| # List owners for the app in the contoso.com tenant | |
| .\ManageAppAndServicePrincipalOwner.ps1 -List -Application -AppId "e1d83a3c-fea5-4315-9591-8d9f185d2d56" -TenantId "contoso.com" | ft userPrincipalName |
| <# | |
| .SYNOPSIS | |
| Grants (or removes) application permissions (app role assignments) to a client application. | |
| .PARAMETER ClientId | |
| The AppId or one of the ServicePrincipalNames of the client service principal. | |
| .PARAMETER Permissions | |
| A hashtable where the key is an identifier for the resource (either the AppId or one of the | |
| ServicePrincipalNames) and the value is the space-separated list of app roles desired. |
| # THIS CODE IS PROVIDED AS IS WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF | |
| # FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR NON-INFRINGEMENT. | |
| #Requires -Modules @{ ModuleName="Microsoft.Graph.Authentication" ; ModuleVersion="2.15.0" } | |
| #Requires -Modules @{ ModuleName="Microsoft.Graph.DirectoryObjects"; ModuleVersion="2.15.0" } | |
| #Requires -Modules @{ ModuleName="Microsoft.Graph.Identity.SignIns"; ModuleVersion="2.15.0" } | |
| #Requires -Modules @{ ModuleName="Microsoft.Graph.Applications" ; ModuleVersion="2.15.0" } | |
| #Requires -Modules @{ ModuleName="Microsoft.Graph.Users" ; ModuleVersion="2.15.0" } | |
| <# |
| <# | |
| Two helper functions to simplify managing user MFA state in Azure Active Directory. | |
| Examples: | |
| # Disable MFA for one user, keeping MFA methods intact | |
| Get-MsolUser -UserPrincipalName "user@example.com" | Disable-Mfa -KeepMethods | |
| # Disable MFA for all users, keeping their MFA methods intact |
| <# | |
| .SYNOPSIS | |
| Lists required permissions (RequiredResourceAccess) for all app registrations. | |
| .EXAMPLE | |
| PS C:\> .\Get-AzureADPSRequiredPermissions.ps1 | Export-Csv -Path "required_permissions.csv" -NoTypeInformation | |
| Generates a CSV report of all required permissions declared by all apps. | |
| #> | |
| [CmdletBinding()] |
| <# | |
| .SYNOPSIS | |
| Adds a new AppRole to an Application. | |
| .PARAMETER Application | |
| The Application object's object ID. | |
| .PARAMETER AllowedMemberTypes | |
| The allowed member types, Application, User or both. |
| <html> | |
| <head> | |
| <style>* { font-family: sans-serif; }</style> | |
| </head> | |
| <body> | |
| <p>You are at https://bl.ocks.org/psignoret/raw/782d7b48d47685dbce4e9cc3433462db/. The page that launched this popup | |
| is on a different domain (demo.psignoret.com), and cannot see anything here because of CORS.</p> | |
| <p>Go to a page under the same domain as the page that opened the popup: | |
| <a href="https://demo.psignoret.com/">https://demo.psignoret.com/spa/popup_test.html</a> | |
| </p> |
| <# | |
| .SYNOPSIS | |
| Lists delegated permission grants (OAuth2PermissionGrants) and application permissions grants (AppRoleAssignments) granted to an app. | |
| .PARAMETER ObjectId | |
| The ObjectId of the ServicePrincipal object for the app in question. | |
| .PARAMETER AppId | |
| The AppId of the ServicePrincipal object for the app in question. |
| <# | |
| .SYNOPSIS | |
| Adjust the mouse speed when using Barrier (on Windows) to control another computer. | |
| .DESCRIPTION | |
| When using Barrier (https://github.com/debauchee/barrier) across two computers of different | |
| resolutions/DPIs, the server's mouse speed may be too fast or too slow on the client computer: | |
| https://github.com/debauchee/barrier/issues/741. This script monitors Barrier's log file and adjusts | |
| the server's mouse speed when the mouse has moved onto the client. |