MSAL for Python を使用して Azure AD の最終サインイン日時を取得する

import os
import msal
import requests

authority = f"https://login.microsoftonline.com/{os.environ['TENANT_ID']}"
scopes = ['https://graph.microsoft.com/.default']
endpoint_users = 'https://graph.microsoft.com/v1.0/users'
endpoint_auditlogs = 'https://graph.microsoft.com/v1.0/auditLogs/signIns'

def connect_aad():
    cred = msal.ConfidentialClientApplication(
        client_id=os.environ['CLIENT_ID'],
        client_credential=os.environ['CLIENT_SECRET'],
        authority=authority)

    return cred

def get_access_token(cred):
    res = None
    res = cred.acquire_token_silent(scopes,account=None)

    if not res:
        print("キャッシュ上に有効なアクセストークンがありません。Azure AD から最新のアクセストークンを取得します。")
        res = cred.acquire_token_for_client(scopes=scopes)

    return res

def get_users_all(token):
    p = '?$select=id,userPrincipalName'
    res = requests.get(
        f"{endpoint_users}{p}",
        headers={'Authorization': 'Bearer ' + token['access_token']})

    if res.ok:
        data = res.json()
        print(f"{len(data['value'])} 件のユーザー情報取得に成功しました。")
        return data
    else:
        print(res.json())

def get_auditlog_lastsingin(token, users):
    for user in users['value']:
        q = f"?$filter=userId eq '{user['id']}'&$orderby=createdDateTime desc&$top=1"
        res = requests.get(
            f"{endpoint_auditlogs}{q}",
            headers={'Authorization': 'Bearer ' + token['access_token']})
        data = res.json()

        if res.ok & len(data['value']) > 0:
            data = res.json()
            print(f"UPN: {data['value'][0]['userPrincipalName']}, 最終ログイン日時(UTC): {data['value'][0]['createdDateTime']}")
        elif res.ok & len(data['value']) == 0:
            print(f"UPN: {user['userPrincipalName']}, 最終ログイン日時(UTC): 0")
        else:
            print(data)

def main():
    cred = connect_aad()
    token = get_access_token(cred)

    if "access_token" in token:
        users = get_users_all(token)
        get_auditlog_lastsingin(token, users)
    else:
        print(token.get("error"))
        print(token.get("error_description"))
        print(token.get("correlation_id"))

if __name__ == '__main__':
    main()

import os
import msal
import requests

authority = f"https://login.microsoftonline.com/{os.environ['TENANT_ID']}"
scopes = ['https://graph.microsoft.com/.default']
endpoint_users = 'https://graph.microsoft.com/beta/users'

def connect_aad():
    cred = msal.ConfidentialClientApplication(
        client_id=os.environ['CLIENT_ID'],
        client_credential=os.environ['CLIENT_SECRET'],
        authority=authority)

    return cred

def get_access_token(cred):
    res = None
    res = cred.acquire_token_silent(scopes,account=None)

    if not res:
        print("キャッシュ上に有効なアクセストークンがありません。Azure AD から最新のアクセストークンを取得します。")
        res = cred.acquire_token_for_client(scopes=scopes)

    return res

def get_users_all_and_lastsignins(token):
    q = '?$select=id,userPrincipalName,userType,signInActivity'
    res = requests.get(
        f"{endpoint_users}{q}",
        headers={'Authorization': 'Bearer ' + token['access_token']})

    if res.ok:
        data = res.json()
        print(f"{len(data['value'])} 件のユーザー情報と最終サインイン日時の取得に成功しました。")
        print(data)

        for user in data['value']:
            print(f"UPN: {user['userPrincipalName']}, ユーザー種別: {user['userType']}, 最終ログイン日時(UTC): {user['signInActivity']['lastSignInDateTime']}")
            # user = {
            #     'userPrincipalName': '***',
            #     'userType': 'Member', # Member or Guest
            #     'id': '***',
            #     'signInActivity': {
            #         'lastSignInDateTime': '2021-06-27T16:03:52Z',
            #         'lastSignInRequestId': '18d3b341-727f-418b-995f-3be4bf11bd00',
            #         'lastNonInteractiveSignInDateTime': '0001-01-01T00:00:00Z',
            #         'lastNonInteractiveSignInRequestId': ''
            #     }
            # }
    else:
        print(res.json())

def main():
    cred = connect_aad()
    token = get_access_token(cred)

    if "access_token" in token:
        get_users_all_and_lastsignins(token)
    else:
        print(token.get("error"))
        print(token.get("error_description"))
        print(token.get("correlation_id"))

if __name__ == '__main__':
    main()