"""
Configuration file for Azure Key Vault Secret Manager

This application automatically detects your tenant ID and allows you to
select your subscription after authentication. No manual configuration needed!
"""

# Azure CLI Client ID (public client for interactive browser auth)
# This is the well-known Azure CLI client ID and does not need to be changed
CLIENT_ID = "04b07795-8ddb-461a-bbee-02f9e1bf7b46"

# Application Settings
APP_SECRET_EXPIRATION_YEARS = 50

# Required Microsoft Graph API Permissions (Delegated):
# - Application.ReadWrite.All
# - Directory.Read.All
#
# Required Azure RBAC Roles:
# - Key Vault Secrets Officer (or Contributor) on target Key Vaults
# - Reader on subscription/resource groups