...but shouldn't be according to the MS Graph docs on perms per API.

https://stackoverflow.com/questions/61258791/admin-consent-required-with-only-delegated-permissions https://learn.microsoft.com/en-us/graph/permissions-reference

We're only using Tasks and User.ReadBasic which show as not requiring admin grant on login.

Currently:

PS C:\Users\kitplummer\Code\tdi> cargo run me    
    Finished dev [unoptimized + debuginfo] target(s) in 0.77s
     Running `target\debug\tdi.exe me`
thread 'main' panicked at 'tdi: unable to read access token configuration.: Os { code: 2, kind: NotFound, message: "The system cannot find the file specified." }', src\auth.rs:85:10
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
error: process didn't exit successfully: `target\debug\tdi.exe me` (exit code: 101)

As a tdi user, I need to be able to login with my Microsoft credentials in order to gain access to my To Do tasks.

DoD: when a user can run a tdi login command and capture an authentication token locally - requiring the full authentication loop to/from the browser.

• Move user to own module
• Add output_format as option

PS C:\Users\kitplummer\Code\tdi> .\target\debug\tdi me --help
tdi.exe-me 0.0.1
Show user details

USAGE:
    tdi.exe me [OPTIONS]

OPTIONS:
    -h, --help
            Print help information

    -o, --output-format <OUTPUT_FORMAT>
            Display output as "lines", "json" or "table" [default: lines]

    -V, --version
            Print version information

• Output support for json, table, and basic line as default

PS C:\Users\kitplummer\Code\tdi> .\target\debug\tdi me -o json
{"display_name":"Kit Plummer","given_name":"Kit","surname":"Plummer","id":"xxx","job_title":"DIR SPECIALIST","mail":"[email protected]","mobile_phone":"null","office_location":"ATLANTA/Mobile","user_principal_name":"xxx"}

• moves auth functions into own module
• removes need for CLIENT_SECRET
• including the actual app ID
• exit gracefully from successfully logging in
• logout support

     Running `target\debug\tdi.exe login`
tdi: authenticating, a browser window will open.
tdi: creating directory path for access token config.
tdi: logged in, and stored token for future use.

Sits there and not exiting.

tdi 0.0.1
Simple CLI for Microsoft's To Do tasks

USAGE:
    tdi.exe [SUBCOMMAND]

OPTIONS:
    -h, --help       Print help information
    -V, --version    Print version information

SUBCOMMANDS:
    add         Create a new task in ToDo
    complete    Complete the given task
    delete      Delete the given task
    help        Print this message or the help of the given subcommand(s)
    intr        Repl todo shell
    lists       Show the lists in the user's ToDo
    login       Login to Microsoft's Graph database
    logout      Logout of Microsoft's SSO
    me          Show user details
    reopen      Reopen the given task
    show        Display the kanban board
    tasks

     Running `target\debug\tdi.exe me`
Error: Graph error:
GraphError {
    headers: Some(
        GraphHeaders {
            url: "https://graph.microsoft.com/v1.0/me",
            status: 401,
            header_map: {
                "transfer-encoding": "chunked",
                "content-type": "application/json",
                "strict-transport-security": "max-age=31536000",
                "request-id": "1740feb8-b33a-4c08-a6ee-ab5cfc5a18c4",
                "client-request-id": "1740feb8-b33a-4c08-a6ee-ab5cfc5a18c4",
                "x-ms-ags-diagnostic": "{\"ServerInfo\":{\"DataCenter\":\"South Central US\",\"Slice\":\"E\",\"Ring\":\"5\",\"ScaleUnit\":\"003\",\"RoleInstance\":\"SN4PEPF0000050E\"}}",
                "www-authenticate": "Bearer realm=\"\", authorization_uri=\"https://login.microsoftonline.com/common/oauth2/authorize\", client_id=\"00000003-0000-0000-c000-000000000000\"",
                "date": "Fri, 23 Sep 2022 11:57:49 GMT",
            },
        },
    ),
    code: 401,
    error_message: ErrorMessage {
        error: Some(
            ErrorStatus {
                code: Some(
                    "InvalidAuthenticationToken",
                ),
                message: Some(
                    "Access token has expired or is not yet valid.",
                ),
                inner_error: Some(
                    InnerError {
                        code: None,
                        request_id: Some(
                            "1740feb8-b33a-4c08-a6ee-ab5cfc5a18c4",
                        ),
                        date: Some(
                            "2022-09-23T11:57:50",
                        ),
                    },
                ),
            },
        ),
    },
}

In order to add to the functional tests suite, need to be able to short-circuit the auth loop, or somehow include it. Requires some serious investigation.

this is a question, as much as a task. need to determine if adding the ToDos API to the graph-rs library is worth the effort, versus implementing the select REST API calls required to support it within this app.