[AzureAD] Updated to use variable graph_url for different national clouds

examples/azuread/sample_jupyter_config.py

@@ -16,3 +16,9 @@
 # uncomment the line below to use 'unique_name' rather than the default 'name'. Consult the Azure
 # documentation for other field names.
 # c.AzureAdOAuthenticator.username_claim = 'unique_name'
+
+# if you are using a different cloud then Azure portal (global service) you will need to provide
+# the graph url. By default it will use the https://login.microsoftonline.com
+
+
+# c.AzureAdOAuthenticator.graph_url = os.environ.get('AAD_GRAPH_URL')

oauthenticator/azuread.py

@@ -54,17 +54,33 @@ def _auth_state_groups_key_default(self):
         """,
     )
 
+    graph_url = Unicode(
+        config=True,
+        help="""
+        An Azure graph url for which an OAuth application. This correlates
+        to which cloud such as Azure portal (global service) [default] 
+        Azure GOV, Azure China, etc. are being used.
+
+        This is used to set the default values of `authorize_url` and
+        `token_url`.
+        """,
+    )
+
     @default('tenant_id')
     def _tenant_id_default(self):
         return os.environ.get('AAD_TENANT_ID', '')
 
+    @default('graph_url')
+    def _graph_url_default(self):
+        return os.environ.get('AAD_GRAPH_URL', 'https://login.microsoftonline.com')
+
     @default("authorize_url")
     def _authorize_url_default(self):
-        return f"https://login.microsoftonline.com/{self.tenant_id}/oauth2/authorize"
+        return f"{self.graph_url}/{self.tenant_id}/oauth2/authorize"
 
     @default("token_url")
     def _token_url_default(self):
-        return f"https://login.microsoftonline.com/{self.tenant_id}/oauth2/token"
+        return f"{self.graph_url}/{self.tenant_id}/oauth2/token"
 
     async def token_to_user(self, token_info):
         id_token = token_info['id_token']

oauthenticator/tests/test_azuread.py

@@ -235,6 +235,13 @@ async def test_tenant_id_from_env():
         assert aad.tenant_id == tenant_id
 
 
+async def test_graph_url_from_env():
+    graph_url = "https://some_random_url.com"
+    with mock.patch.dict(os.environ, {"AAD_GRAPH_URL": graph_url}):
+        aad = AzureAdOAuthenticator()
+        assert aad.graph_url == graph_url
+
+
 @mark.parametrize(
     "test_variation_id,class_config,expect_config,expect_loglevel,expect_message",
     [