fastapi_azure_ad_single_tenant_auth_with_user_impersonation.py

1import uvicorn
2from fastapi import FastAPI, Depends, Security
3from fastapi.middleware.cors import CORSMiddleware
4from fastapi_azure_auth import SingleTenantAzureAuthorizationCodeBearer
5from fastapi_azure_auth.user import User
6
7app = FastAPI()
8
9# Standard CORS settings
10app.add_middleware(
11    CORSMiddleware,
12    allow_origins=['*'],
13    allow_credentials=True,
14    allow_methods=['*'],
15    allow_headers=['*'],
16)
17
18azure_scheme = SingleTenantAzureAuthorizationCodeBearer(
19    app_client_id='your-client-id-gu-id',
20    tenant_id='your-tenant-id-gu-id',
21    scopes={
22        'api://your-client-id-gu-id/user_impersonation': 'user_impersonation',
23    }
24)
25
26@app.on_event('startup')
27async def load_config() -> None:
28    """
29    Load OpenID config on startup.
30    """
31    await azure_scheme.openid_config.load_config()
32
33@app.get(
34    '/hello',
35    dependencies=[Security(azure_scheme)],
36)
37async def hello_world(user: User = Depends(azure_scheme)) -> dict[str, str]:
38    """
39    Returns a 'Hello World' message to the authenticated user.
40    """
41    return {'message': f'Hello, {user.name}!'}
42
43if __name__ == '__main__':
44    uvicorn.run('main:app', reload=True)