Vertec Python module “vtcauth”

From version 6.8 there is the Python module vtcauth to be able to use OAuth authentication in arbitrary extensions and Python scripts in Vertec.

This contains a decorator authenticate to which a config dictionary is passed as argument. The parameters that can be passed in the config dictionary are the following in vtcauth existing instance variables:

"https://graph.microsoft.com/.default offline_access"

"https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/authorize"

"https://login.microsoftonline.com/{tenant_id}/oauth2/v2.0/token"

The minimum call (for MS Graph) in a script looks like this:

from vtcauth import authenticate
# config example using vertec properties with prefix
config_prefix = {
    "tenant_id":"xxxxxxxxxxxxxxxxxxx.onmicrosoft.com",
    "prefix":"DmsSharePoint",
    "logging":True,}
# using decorator from vtcauth with config_prefix dict
@authenticate(config_prefix)

The entire OAuth authentication takes place via the decorator @authenticate(config_prefix) instead.

If the user is not already logged in to the targeted application, he has one minute to authenticate. If he does not log in to the open login dialog of the targeted product within one minute, there is a timeout.

If the token is expired or invalid, a TokenExpiredException This triggers the OAuth mechanism to fetch new tokens. If a RefreshToken is present and valid, the AccessToken is fetched with the RefreshToken. The exception can be executed a maximum of three times in the same call (by default), after which an error is thrown.

Example

In this example, the first 10 sites of a SharePoint are displayed (MS Graph with OAuth authentication):

import requests
from vtcauth import authenticate, TokenExpiredException

# config example using vertec properties with prefix
config_prefix = {
    "tenant_id":"xxxxxxxxxxxxxxxxxxx.onmicrosoft.com",
    "prefix":"DmsSharePoint",
    "logging":True,}

class SharePointSiteQuery:
    # using decorator from vtcauth with config_prefix dict
    @authenticate(config_prefix)
    def get_sites_with_prefix_config(self):
        return self.get_sites()

    def get_sites(self):
        headers = {
            "Authorization": "Bearer {}".format(self.access_token),
            "Content-Type": "application/json",}
        response = requests.get("https://graph.microsoft.com/v1.0/sites?search=*&$top=10", headers=headers)
        if response.ok:
            content = response.json()
        elif: response.status_code == requests.codes.unauthorized:
            raise TokenExpiredException
        else:
            print(response.json().get("error").get("code") + ' - ' + response.json().get("error").get("message"))

query = SharePointSiteQuery()
query.get_sites_with_prefix_config()

The Vertec SharePoint Extension now also uses the module vtcauth internally. This does not change the operation of the extension.

Stub File

The module vtcauth is also supplied as a Stub File.