---

Class ::ms::Authorize

::ms::Authorize create ... \
           [ -after_successful_login_url (default "/pvt/") ] \
           [ -base_url base_url ] \
           [ -client_id client_id ] \
           [ -client_secret client_secret ] \
           [ -create_not_registered_users:boolean (default "false") ] \
           [ -create_with_dotlrn_role (default "") ] \
           [ -debug:boolean (default "false") ] \
           [ -login_failure_url (default "/") ] \
           [ -pretty_name (default "Azure") ] \
           [ -responder_url (default "/oauth/azure-login-handler") ] \
           [ -response_type (default "code id_token") ] \
           [ -scope (default "openid offline_access profile") ] \
           [ -tenant tenant ] \
           [ -version (default "") ]

Support for the Microsoft Microsoft identity platform ID tokens to login/logout via MS Azure accounts. https://learn.microsoft.com/en-us/azure/active-directory/develop/id-tokens

Defined in packages/xooauth/tcl/ms-procs.tcl

Class Relations

• class: ::nx::Class
• superclass: ::xo::Authorize

Methods (to be applied on instances)

• login_url (scripted, public)

   <instance of ms::Authorize> login_url [ -prompt prompt ] \
      [ -return_url return_url ] [ -login_hint login_hint ] \
      [ -domain_hint domain_hint ] [ -code_challenge code_challenge ] \
      [ -code_challenge_method code_challenge_method ]

  Returns the URL for logging in "oauth2/authorize" is defined in RFC 6749, but requests for MS id-tokens inversion v1.0 and v2.0 are defined here: https://learn.microsoft.com/en-us/azure/active-directory/develop/id-tokens

  Switches:

  -prompt

  (optional)

  -return_url

  (optional)

  -login_hint

  (optional)

  -domain_hint

  (optional)

  -code_challenge

  (optional)

  -code_challenge_method

  (optional)

  Partial Call Graph (max 5 caller/called nodes):

  Testcases:

  No testcase defined.

• logout (scripted, public)

   <instance of ms::Authorize> logout

  Perform logout operation form MS in the background (i.e. without a redirect).

  Partial Call Graph (max 5 caller/called nodes):

  Testcases:

  No testcase defined.

• logout_url (scripted, public)

   <instance of ms::Authorize> logout_url \
      [ -return_url return_url ]

  Returns the URL for logging out. After the logout, azure redirects to the given page.

  Switches:

  -return_url

  (optional)

  Partial Call Graph (max 5 caller/called nodes):

  Testcases:

  No testcase defined.

---