refactor auth module, new types for tenant namespace

Author: vgrem

README.md

@@ -93,7 +93,7 @@ Steps to access:
    - [Granting access via Azure AD App-Only](https://docs.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azuread)  
    - [wiki](https://github.com/vgrem/Office365-REST-Python-Client/wiki/How-to-connect-to-SharePoint-Online-with-certificate-credentials) 
   
-  Example: [connect_with_client_certificate.py](examples/sharepoint/auth_client_certificate.py)
+  Example: [with_certificate.py](examples/sharepoint/auth_certificate.py)
 
 #### 4. Interactive
 

examples/sharepoint/auth_client_certificate.py renamed to examples/sharepoint/auth_certificate.py

@@ -26,13 +26,13 @@ def export_to_file(path, content):
     "--endpoint",
     dest="endpoint",
     help="Import metadata endpoint",
-    default="graph",
+    default="sharepoint",
 )
 parser.add_argument(
     "-p",
     "--path",
     dest="path",
-    default="./metadata/Graph.xml",
+    default="./metadata/SharePoint.xml",
     help="Import metadata endpoint",
 )
 

examples/sharepoint/auth_client_certificate_adal.py renamed to examples/sharepoint/auth_certificate_adal.py

@@ -2,7 +2,7 @@
 import sys
 from typing import Any, Callable
 
-from typing_extensions import Required, TypedDict
+from typing_extensions import Required, Self, TypedDict
 
 from office365.runtime.auth.client_credential import ClientCredential
 from office365.runtime.auth.providers.acs_token_provider import ACSTokenProvider
@@ -211,12 +211,14 @@ def with_credentials(self, credentials):
             raise ValueError("Unknown credential type")
 
         def _authenticate(request):
+            # type: (RequestOptions) -> None
             provider.authenticate_request(request)
 
         self._authenticate = _authenticate
         return self
 
     def acquire_token_for_user(self, username, password):
+        # type: (str, str) -> Self
         """
         Initializes a client to acquire a token via user credentials
         Status: deprecated!
@@ -227,6 +229,7 @@ def acquire_token_for_user(self, username, password):
         provider = SamlTokenProvider(self.url, username, password, self._browser_mode)
 
         def _authenticate(request):
+            # type: (RequestOptions) -> None
             provider.authenticate_request(request)
 
         self._authenticate = _authenticate
@@ -244,6 +247,7 @@ def acquire_token_for_app(self, client_id, client_secret):
         provider = ACSTokenProvider(self.url, client_id, client_secret)
 
         def _authenticate(request):
+            # type: (RequestOptions) -> None
             provider.authenticate_request(request)
 
         self._authenticate = _authenticate

examples/sharepoint/auth_client_certificate_passphrase.py renamed to examples/sharepoint/auth_certificate_passphrase.py

@@ -31,14 +31,9 @@ def __init__(self, url, client_id, client_secret, environment="commercial"):
 
     def authenticate_request(self, request):
         # type: (RequestOptions) -> None
-        self.ensure_app_only_access_token()
+        self._ensure_app_only_access_token()
         request.set_header("Authorization", self._get_authorization_header())
 
-    def ensure_app_only_access_token(self):
-        if self._cached_token is None:
-            self._cached_token = self.get_app_only_access_token()
-        return self._cached_token and self._cached_token.is_valid
-
     def get_app_only_access_token(self):
         """Retrieves an app-only access token from ACS"""
         try:
@@ -53,6 +48,11 @@ def get_app_only_access_token(self):
             )
             raise ValueError(self.error)
 
+    def _ensure_app_only_access_token(self):
+        if self._cached_token is None:
+            self._cached_token = self.get_app_only_access_token()
+        return self._cached_token and self._cached_token.is_valid
+
     def _get_app_only_access_token(self, target_host, target_realm):
         """
         Retrieves an app-only access token from ACS to call the specified principal
@@ -119,6 +119,3 @@ def get_security_token_service_url(realm, environment):
 
     def _get_authorization_header(self):
         return "Bearer {0}".format(self._cached_token.accessToken)
-
-    def get_last_error(self):
-        return self.error