Sign-in: Use browser for interactive sign-in

[chrmarti]

It has been suggested that this would simplify the user interactions to sign in.

The Azure CLI implemented this first: Azure/azure-cli#6593

[chrmarti]

Notes from @yugangw-msft:

In short:

1. CLI spins up a web server listening on a local port (make sure to open the port as loopback so the port can’t be reached from external)
2. CLI launches a browser with the AAD authentication url and registers the replay-url of http://localhost:port through the query string
3. Once the user get authenticated in the browser, AAD will redirect back to the http://localhost:port with the authorization code that your code in the web server will use to exchange for a token

https://github.com/Azure/azure-cli/blob/e084890e275faf532f1f82b9ea66cde90a8d447b/src/azure-cli-core/azure/cli/core/_profile.py#L1020

[chrmarti]

Turns out we cannot use the same approach because it is not (or no longer) supported by AAD.

[chrmarti]

Available in 0.8.0.

[fiveisprime]

Yes! This is absolutely fantastic! Thanks for getting this in 😄