aadsts

Documentation

Overview

Package aadsts classifies Azure AD error codes (AADSTS*) into CredBaron plugin outcomes. Works on both JSON bodies (msol, msgraph) and raw text blobs (azuresso SOAP faults).

Index

• Variables
• func ClassifyJSON(body []byte, username, password string) plugins.Outcome
• func ClassifyText(text, username, password string) plugins.Outcome
• func OAuth2Spray(name, resource string) plugins.Plugin

Variables

var ClientIDs = []string{
	"1b730954-1685-4b74-9bfd-dac224a7b894",
	"04b07795-8ddb-461a-bbee-02f9e1bf7b46",
	"1fec8e78-bce4-4aaf-ab1b-5451cc387264",
	"1950a258-227b-4e31-a9cf-717495945fc2",
	"ecd6b820-32c2-49b6-98a6-444530e5a77a",
	"29d9ed98-a469-4536-ade2-f981bc1d605e",
	"9ba1a5c7-f17a-4de9-a1f1-6178c8d51223",
}

ClientIDs is the rotated client_id pool shared by every Microsoft Online OAuth2 spray plugin. Sourced from ROADtools WELLKNOWN_CLIENTS — the curated list of first-party Microsoft apps that still permit ROPC. https://github.com/dirkjanm/ROADtools/blob/master/roadlib/roadtools/roadlib/constants.py

Functions

func ClassifyJSON

func ClassifyJSON(body []byte, username, password string) plugins.Outcome

func ClassifyText

func ClassifyText(text, username, password string) plugins.Outcome

func OAuth2Spray

func OAuth2Spray(name, resource string) plugins.Plugin

OAuth2Spray returns a Plugin that posts a Resource Owner Password Credential grant to login.microsoftonline.com (overridable via PluginArgs["url"]) for the given OAuth2 resource. Used by msol, msgraph, azvault.

The plugin self-registers nothing; the caller is responsible for invoking plugins.Register on the returned value (typically from an init() function).