English 简体中文 русский

forked from AutoApiSecret

encrypt refresh_token with aes-256

1. Open https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade and then click New registration.
2. Enter a name for your app, choose account type Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox), select Web in Redirect URI, then type http://localhost:53682/ and click Register. Copy and keep the Application (client) ID under the app name for later use.
3. Under manage select Certificates & secrets, click New client secret. Copy and keep that secret for later use.
4. Under manage select API permissions, click Add a permission and select Microsoft Graph then select delegated permissions.
5. Search and select the following permissions: Files.Read.All Sites.Read.All User.Read.All Directory.Read.All Mail.Read MailboxSettings.Read. Once selected click Add permissions at the bottom.
6. Download this script on your Windows computer, click run in powershell in the right-click menu, enter your client id and client secret, and follow the instruction to get refresh_token. (if the script is forbidden, execute in powershell as administrator Start-Process -Wait -Verb RunAs powershell.exe -Args "-executionpolicy bypass -command Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force)
7. Click https://github.com/yuudi/ms-tester-encrypted/generate, this will help you create a github repositories, either public or private are okay.
8. Go to repositories settings, click secrets, click New secret, enter AES_KEY in Name, enter any password in Value. (you don't need to remember it, just use a random string)
9. Repeat the previous step and add these secrets: CLIENT_ID -> your client id, CLIENT_SECRET -> your client secret, REFRESH_TOKEN -> the refresh_token we get just now.
10. Go to repositories actions, enable the actions, and enjoy the tester, you can click Run workflow to manual trigger it.