diff --git a/azure_client.py b/azure_client.py
deleted file mode 100644
index c4b67ff..0000000
--- a/azure_client.py
+++ /dev/null
@@ -1,239 +0,0 @@
-import os
-from dotenv import load_dotenv
-import logging
-import json
-import msal
-import requests
-from datetime import datetime, timezone
-
-# Load environment variables
-load_dotenv()
-
-# Configure logging
-logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
-
-def get_app_registrations():
- logging.info("Authenticating to Microsoft Graph API")
-
- # Azure AD app credentials from environment variables
- client_id = os.getenv('AZURE_CLIENT_ID')
- client_secret = os.getenv('AZURE_CLIENT_SECRET')
- tenant_id = os.getenv('AZURE_TENANT_ID')
-
- authority = f"https://login.microsoftonline.com/{tenant_id}"
- scope = ["https://graph.microsoft.com/.default"]
-
- # Create a confidential client application
- app = msal.ConfidentialClientApplication(
- client_id,
- authority=authority,
- client_credential=client_secret
- )
-
- # Acquire a token
- result = app.acquire_token_for_client(scopes=scope)
-
- if "access_token" in result:
- logging.info("Successfully authenticated to Microsoft Graph API")
- access_token = result["access_token"]
- else:
- logging.error("Failed to authenticate to Microsoft Graph API")
- logging.error(result.get("error"))
- logging.error(result.get("error_description"))
- logging.error(result.get("correlation_id"))
- return []
-
- # Fetch app registrations with owners
- # Updated URL to include both app registration and owner data
- graph_url = (
- "https://graph.microsoft.com/v1.0/applications"
- "?$select=id,appId,displayName,passwordCredentials"
- "&$expand=owners($select=userPrincipalName)"
- )
-
- headers = {
- "Authorization": f"Bearer {access_token}",
- "ConsistencyLevel": "eventual"
- }
-
- try:
- response = requests.get(graph_url, headers=headers)
- response.raise_for_status()
-
- # Debug log the raw response
- #logging.info(f"API Response Status: {response.status_code}")
- #logging.debug(f"API Response: {response.text[:1000]}...") # First 1000 chars
-
- app_registrations = response.json().get('value', [])
- logging.info(f"Fetched {len(app_registrations)} app registrations")
- return app_registrations
-
- except requests.exceptions.RequestException as e:
- logging.error(f"Error fetching app registrations: {e}")
- return []
-
-def sort_app_registrations(app_registrations):
- current_date = datetime.now(timezone.utc)
- for app in app_registrations:
- if app["passwordCredentials"]:
- expiry_date_str = app["passwordCredentials"][0]["endDateTime"]
- try:
- if '.' in expiry_date_str:
- expiry_date_str = expiry_date_str.split('.')[0] + '.' + expiry_date_str.split('.')[1][:6] + 'Z'
- if expiry_date_str.endswith('ZZ'):
- expiry_date_str = expiry_date_str[:-1]
- expiry_date = datetime.strptime(expiry_date_str, '%Y-%m-%dT%H:%M:%S.%fZ').replace(tzinfo=timezone.utc)
- except ValueError:
- expiry_date = datetime.strptime(expiry_date_str, '%Y-%m-%dT%H:%M:%SZ').replace(tzinfo=timezone.utc)
- days_to_expiry = (expiry_date - current_date).days
- app["days_to_expiry"] = days_to_expiry
- app["expiry_date"] = expiry_date.isoformat()
- else:
- app["days_to_expiry"] = None
- app["expiry_date"] = None
-
- sorted_apps = sorted(app_registrations, key=lambda x: (x["days_to_expiry"] is None, x["days_to_expiry"]), reverse=False)
- return sorted_apps
-
-def generate_html(app_registrations):
- current_time = datetime.now(timezone.utc).strftime('%Y-%m-%d %H:%M:%S')
- html = f"""
-
-
- App Registrations
-
-
-
-
-
Azure App Registration Expiry Notification
-
This is an automated notification regarding expiring Azure App Registrations that you own or manage.
-
-
Why am I receiving this?
- You are receiving this email because you are listed as an owner of one or more Azure App Registrations that are approaching their expiration date or have already expired.
-
-
Required Actions:
-
- - Review the list of app registrations below
- - For any expiring or expired registrations:
-
- - Verify if the app registration is still needed
- - If needed, renew the credentials before they expire
- - If not needed, consider removing the app registration
-
-
-
-
-
Color Coding:
-
- - Green: More than 30 days until expiry
- - Yellow: Between 8-30 days until expiry
- - Orange: 7 days or less until expiry
- - Red: Expired
-
-
-
If you need assistance, please contact the IT Support team.
-
App Registrations
- Exported on: {current_time}
-
-
- | Display Name |
- Expiry Date |
- Days to Expiry |
- Owners |
-
- """
-
- for app in app_registrations:
- password_credentials = app.get('passwordCredentials', [])
- if not password_credentials:
- continue
-
- expiry_date = password_credentials[0].get('endDateTime')
- if expiry_date:
- try:
- if '.' in expiry_date:
- expiry_date = expiry_date.split('.')[0] + '.' + expiry_date.split('.')[1][:6] + 'Z'
- if expiry_date.endswith('ZZ'):
- expiry_date = expiry_date[:-1]
- expiry_date = datetime.strptime(expiry_date, '%Y-%m-%dT%H:%M:%S.%fZ').replace(tzinfo=timezone.utc)
- except ValueError:
- expiry_date = datetime.strptime(expiry_date, '%Y-%m-%dT%H:%M:%SZ').replace(tzinfo=timezone.utc)
- days_to_expiry = (expiry_date - datetime.now(timezone.utc)).days
-
- if days_to_expiry > 30:
- color_class = "green"
- elif 7 < days_to_expiry <= 30:
- color_class = "yellow"
- elif 1 <= days_to_expiry <= 7:
- color_class = "orange"
- else:
- color_class = "red"
- days_to_expiry = "EXPIRED"
-
- owners = app.get('owners', [])
- owner_upns = [owner.get('userPrincipalName') for owner in owners if owner.get('userPrincipalName')]
- owner_list = ', '.join(owner_upns) if owner_upns else 'No owners'
-
- html += f"""
-
- | {app['displayName']} |
- {expiry_date.strftime('%Y-%m-%d')} |
- {days_to_expiry} |
- {owner_list} |
-
- """
-
- html += """
-
-
-
- """
-
- return html
-
-if __name__ == "__main__":
- app_registrations = get_app_registrations()
- sorted_app_registrations = sort_app_registrations(app_registrations)
- # Write to JSON file for inspection
- with open('debug_app_registrations.json', 'w') as f:
- json.dump(sorted_app_registrations, f, indent=2)
- # Write to HTML file for inspection
- html_output = generate_html(sorted_app_registrations)
- with open('app_registrations.html', 'w') as f:
- f.write(html_output)
\ No newline at end of file
diff --git a/data_export.py b/data_export.py
deleted file mode 100644
index ab37fbd..0000000
--- a/data_export.py
+++ /dev/null
@@ -1,234 +0,0 @@
-import json
-import logging
-from datetime import datetime
-
-# Configure logging
-logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
-
-# def write_to_json(app_registrations, filename='app_registrations.json'):
-# """
-# Write app registration data to a JSON file.
-
-# :param app_registrations: List of app registration data
-# :param filename: Name of the JSON file to write to
-# """
-# try:
-# with open(filename, 'w') as f:
-# json.dump(app_registrations, f, indent=4)
-# logging.info(f"App registration data successfully written to {filename}")
-# except Exception as e:
-# logging.error(f"Failed to write app registration data to {filename}: {e}")
-
-def generate_html(app_registrations):
- """
- Generate an HTML representation of the app registration data.
-
- :param app_registrations: List of app registration data
- :return: HTML string
- """
- current_time = datetime.utcnow().strftime('%Y-%m-%d %H:%M:%S')
- html = f"""
-
-
- App Registrations
-
-
-
-
-
Azure App Registration Expiry Notification
-
This is an automated notification regarding expiring Azure App Registrations that you own or manage.
-
-
Why am I receiving this?
- You are receiving this email because you are listed as an owner of one or more Azure App Registrations that are approaching their expiration date or have already expired.
-
-
Required Actions:
-
- - Review the list of app registrations below
- - For any expiring or expired registrations:
-
- - Verify if the app registration is still needed
- - If needed, renew the credentials before they expire
- - If not needed, consider removing the app registration
-
-
-
-
-
Color Coding:
-
- - Green: More than 30 days until expiry
- - Yellow: Between 8-30 days until expiry
- - Orange: 7 days or less until expiry
- - Red: Expired
-
-
-
If you need assistance, please contact the IT Support team.
-
App Registrations
- Exported on: {current_time}
-
-
- | Display Name |
- Expiry Date |
- Days to Expiry |
- Owners |
-
- """
-
- for app in app_registrations:
- password_credentials = app.get('passwordCredentials', [])
- if not password_credentials:
- continue
-
- expiry_date = password_credentials[0].get('endDateTime')
- if expiry_date:
- # Clean up the date string
- if expiry_date.endswith('ZZ'):
- expiry_date = expiry_date[:-1]
- elif expiry_date.endswith('Z'):
- expiry_date = expiry_date[:-1]
- # Truncate the fractional seconds part to 6 digits if present
- if '.' in expiry_date:
- expiry_date = expiry_date.split('.')[0] + '.' + expiry_date.split('.')[1][:6] + 'Z'
- else:
- expiry_date += '.000000Z'
- try:
- expiry_date = datetime.strptime(expiry_date, '%Y-%m-%dT%H:%M:%S.%fZ')
- except ValueError as e:
- logging.error(f"Error parsing expiry date for {app['displayName']}: {e}")
- continue
- days_to_expiry = (expiry_date - datetime.utcnow()).days
-
- # Determine row color class
- if days_to_expiry > 30:
- color_class = "green"
- elif 7 < days_to_expiry <= 30:
- color_class = "yellow"
- elif 1 <= days_to_expiry <= 7:
- color_class = "orange"
- else:
- color_class = "red"
- days_to_expiry = "EXPIRED"
-
- # Get owner information
- owners = app.get('owners', [])
- owner_upns = [owner.get('userPrincipalName') for owner in owners if owner.get('userPrincipalName')]
- owner_list = ', '.join(owner_upns) if owner_upns else 'No owners'
-
- html += f"""
-
- | {app['displayName']} |
- {expiry_date.strftime('%Y-%m-%d')} |
- {days_to_expiry} |
- {owner_list} |
-
- """
-
- html += """
-
-
-
- """
-
- return html
-
-def generate_expiry_text(app_name, days_to_expiry, expiry_date):
- if days_to_expiry > 30:
- color = "#28a745" # green
- elif days_to_expiry > 7:
- color = "#ffc107" # yellow
- elif days_to_expiry > 0:
- color = "#ff9800" # orange
- else:
- color = "#dc3545" # red
- days_to_expiry = "EXPIRED"
-
- return f"""
-
-
The app registration {app_name} is set to expire in
-
- {days_to_expiry}
-
- days on {expiry_date.strftime('%Y-%m-%d')}
-
The Azure Client ID {client_id} is set to expire in
- {days_to_expiry} days
- on {expiry_date.strftime('%Y-%m-%d')}.
- Please take the necessary actions to renew the client ID before it expires.
-
-
- """
-
- # Create email message
- msg = MIMEText(body, 'html')
- msg['Subject'] = subject
- msg['From'] = formataddr((from_name, from_email))
- msg['To'] = admin_email
-
- try:
- with smtplib.SMTP(smtp_server, smtp_port) as server:
- server.starttls()
- server.login(smtp_username, smtp_password)
- server.sendmail(from_email, admin_email, msg.as_string())
- logging.info(f"Successfully sent client ID expiry warning to {admin_email}")
- except Exception as e:
- logging.error(f"Failed to send client ID expiry warning: {e}")
-
-if __name__ == "__main__":
- check_client_id_expiry()
\ No newline at end of file