Gerenios / AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365
http://aadinternals.com/aadinternals
MIT License
1.3k stars 217 forks source link

Fixed IncludePartialTGT in Get-UserPRTKeys #97

Closed rchan-cjj closed 5 days ago

rchan-cjj commented 3 months ago

tgt_client_key is currently not returned by https://login.microsoftonline.com/$TenantId/oauth2/token. The TGT client key is returned within the (JSON string) value of tgt_cloud, like:

"tgt_cloud": "{\"clientKey\":\"eyJhbGciOiJkaXIiLCJlb...\",\"keyType\":18,\"messageBuffer\":\"a4IIY...",\"realm\":\"KERBEROS.MICROSOFTONLINE.COM\",\"sn\":\"krbtgt/KERBEROS.MICROSOFTONLINE.COM\",\"cn\":\"USER@DOMAIN.onmicrosoft.com\",\"sessionKeyType\":0,\"accountType\":2}"