First commit

config.py

@@ -0,0 +1,21 @@
+"""
+Configuration file for Azure Key Vault Secret Manager
+
+This application automatically detects your tenant ID and allows you to
+select your subscription after authentication. No manual configuration needed!
+"""
+
+# Azure CLI Client ID (public client for interactive browser auth)
+# This is the well-known Azure CLI client ID and does not need to be changed
+CLIENT_ID = "04b07795-8ddb-461a-bbee-02f9e1bf7b46"
+
+# Application Settings
+APP_SECRET_EXPIRATION_YEARS = 50
+
+# Required Microsoft Graph API Permissions (Delegated):
+# - Application.ReadWrite.All
+# - Directory.Read.All
+#
+# Required Azure RBAC Roles:
+# - Key Vault Secrets Officer (or Contributor) on target Key Vaults
+# - Reader on subscription/resource groups