Python - Add MSAL library from Microsoft to call Azure API for authentication

one can manually install with with:

rm -rf venv

python3 -m venv venv --system-site-packages
source ./venv/bin/activate

pip3 install 'requests>=2.0.0,<3'
pip3 install --no-dependencies msal 'PyJWT[crypto]>=1.0.0,<3'

but one cannot use the most current version as it depends on rust which is not available. It one tries to install the latest version of msal using 'newer' crypto libs the install fails with:

Collecting msal

  Using cached msal-1.34.0-py3-none-any.whl.metadata (11 kB)

Collecting requests<3,>=2.0.0 (from msal)

  Using cached requests-2.32.5-py3-none-any.whl.metadata (4.9 kB)

Collecting PyJWT<3,>=1.0.0 (from PyJWT[crypto]<3,>=1.0.0->msal)

  Using cached PyJWT-2.10.1-py3-none-any.whl.metadata (4.0 kB)

Collecting cryptography<49,>=2.5 (from msal)

  Using cached cryptography-46.0.3.tar.gz (749 kB)

  Installing build dependencies ... error

  error: subprocess-exited-with-error



  × pip subprocess to install build dependencies did not run successfully.

  │ exit code: 1

  ╰─> [29 lines of output]

      Ignoring cffi: markers 'platform_python_implementation != "PyPy" and python_version == "3.8"' don't match your environment

      Collecting maturin<2,>=1.9.4

        Using cached maturin-1.10.1.tar.gz (218 kB)

        Installing build dependencies: started

        Installing build dependencies: finished with status 'done'

so there is a manual workaround but still an version provided by IBM would be good as this will allow to simplify certificate management and allow for automation when we can call the Azure APIs from the PKI and renew certificates fully automated - but this depends on the availability of the msal library to authenticate.

Hi
Yes, we are trying to install it for all (manually) with:
python3 -m pip install --proxy http://<proxy-host>:8080 --trusted-host pypi.org --trusted-host pypi.python.org --trusted-host files.pythonhosted.org 'requests>=2.0.0,<3' --target /<target-path>/packages/

However, if it would be part of the official python package from IBM we would always have the most current version. And all others would benefit from this as well and must not install it manually either. As certificate renewal can only be automated on an Azure PKI with this msal library approach,  unless you  have another idea?

msal can be downloaded from pypi.org - which is where Microsoft distributes it. Have you tried installing it from there (or your internal artifact repository cache/proxy) with pip install msal? IBM doesn't really have a way of packaging these things specifically. Also, in case the library doesn't run on z/OS Microsoft would have to provide the fix. (Disclaimer: I'm not with IBM)