Como posso alterar a duração da validade de um token obtido com `az account get-access-token`?

Como solução alternativa, é possível efetuar login na Interface de Linha de Comando (CLI) do Azure por meio de az logine obter um token com o código Python abaixo. az loginpermaneceu conectado por mais tempo do que a duração da validade do token obtido com az account get-access-token, então o código Python solicita outro token quando o token está próximo de expirar.

Para instalar a Interface de Linha de Comando (CLI) do Azure no Ubuntu:

curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash

Em seguida, faça login via az login. Em seguida, execute este script Python:

import subprocess
import json
import os
import sys
from datetime import datetime, timedelta, timezone

# --- Configuration ---
TOKEN_FILE = "azure_token_info.json"  # File to cache the token and expiry
EXPIRY_BUFFER_SECONDS = 300  # 5 minutes buffer before actual expiry
# --- End Configuration ---

def get_new_token():
    """
    Calls 'az account get-access-token' to fetch a new token and saves it.
    Returns the parsed token data (dict) or None on failure.
    """
    print("Getting new Azure access token...")
    try:
        # Command to get token and expiry in JSON format
        command = [
            "az", "account", "get-access-token",
            "--query", "{accessToken:accessToken, expiresOn:expiresOn, subscription:subscription, tenant:tenant, tokenType:tokenType}",
            "-o", "json"
        ]
        result = subprocess.run(command, capture_output=True, text=True, check=True, encoding='utf-8')
        token_data = json.loads(result.stdout)

        # Save the new token data to the file
        try:
            with open(TOKEN_FILE, 'w') as f:
                json.dump(token_data, f)
            print(f"New token information saved to {TOKEN_FILE}")
            return token_data
        except IOError as e:
            print(f"Error saving token file {TOKEN_FILE}: {e}", file=sys.stderr)
            # Still return the token data even if saving failed, it's usable for now
            return token_data

    except subprocess.CalledProcessError as e:
        print(f"Error calling Azure CLI:", file=sys.stderr)
        print(f"Command: {' '.join(e.cmd)}", file=sys.stderr)
        print(f"Return Code: {e.returncode}", file=sys.stderr)
        print(f"Stderr: {e.stderr}", file=sys.stderr)
        print("Ensure you are logged in with 'az login' and the CLI is installed.", file=sys.stderr)
        return None
    except json.JSONDecodeError as e:
        print(f"Error parsing JSON output from Azure CLI: {e}", file=sys.stderr)
        print(f"Output was: {result.stdout}", file=sys.stderr)
        return None
    except FileNotFoundError:
        print("Error: 'az' command not found. Is Azure CLI installed and in PATH?", file=sys.stderr)
        return None


def get_valid_token():
    """
    Checks the cached token's validity. If invalid, expired, or nearing
    expiry, fetches a new one.
    Returns the valid token data (dict) or None on failure.
    """
    token_data = None
    needs_refresh = False

    if not os.path.exists(TOKEN_FILE):
        print(f"Token file {TOKEN_FILE} not found.")
        needs_refresh = True
    else:
        try:
            with open(TOKEN_FILE, 'r') as f:
                token_data = json.load(f)

            # --- Check expiry ---
            expires_on_str = token_data.get("expiresOn")
            if not expires_on_str:
                 print("Warning: 'expiresOn' field missing in cached token data.")
                 needs_refresh = True
            else:
                try:
                    # Attempt to parse the timestamp. Azure CLI usually outputs
                    # a format like 'YYYY-MM-DD HH:MM:SS.ffffff'.
                    # It usually represents UTC time, even without explicit offset.
                    # We'll parse it assuming it's naive and then make it UTC aware.
                    expiry_datetime_naive = datetime.strptime(expires_on_str, '%Y-%m-%d %H:%M:%S.%f')
                    expiry_datetime_utc = expiry_datetime_naive.replace(tzinfo=timezone.utc) # Assume UTC

                    # Get current UTC time
                    now_utc = datetime.now(timezone.utc)

                    # Check if token is expired or within the buffer period
                    if now_utc + timedelta(seconds=EXPIRY_BUFFER_SECONDS) >= expiry_datetime_utc:
                        print("Token has expired or is nearing expiry.")
                        needs_refresh = True
                    else:
                        print("Loading cached token.")

                except ValueError:
                    # Handle cases where the date format might be different
                    print(f"Warning: Could not parse expiresOn date '{expires_on_str}'. Refreshing token.")
                    needs_refresh = True

        except (IOError, json.JSONDecodeError) as e:
            print(f"Error reading or parsing token file {TOKEN_FILE}: {e}")
            needs_refresh = True

    if needs_refresh:
        token_data = get_new_token() 

    return token_data # Return current data (might be None if refresh failed)


if __name__ == "__main__":
    print("--- Azure Token Refresh Script ---")

    # Get a valid token (fetches new one if necessary)
    valid_token_info = get_valid_token()

    if valid_token_info and "accessToken" in valid_token_info:
        access_token = valid_token_info["accessToken"]
        expires_on = valid_token_info.get("expiresOn", "N/A")

        # Use the access token for your API calls
        print("\nSuccessfully obtained valid access token.")
        print(f"Expires On: {expires_on}")
        # IMPORTANT: Avoid logging the full token in production environments!
        print(f"Token (first 10 chars): {access_token[:10]}...")

        # ---------------------------------------------------------------------
        # TODO: Insert your code here to use the 'access_token'
        # Example using requests library (install with: pip install requests)
        # ---------------------------------------------------------------------
        # import requests
        #
        # api_endpoint = "https://YOUR_AOAI_ENDPOINT/openai/deployments?api-version=YYYY-MM-DD"
        # headers = {
        #     "Authorization": f"Bearer {access_token}",
        #     "Content-Type": "application/json"
        # }
        # payload = {
        #     # Your deployment details here
        # }
        #
        # try:
        #     # response = requests.post(api_endpoint, headers=headers, json=payload)
        #     # response.raise_for_status() # Raise an exception for bad status codes (4xx or 5xx)
        #     # print("API call successful:")
        #     # print(response.json())
        #     print("\nPlaceholder: API call would be made here.")
        #
        # except requests.exceptions.RequestException as e:
        #     print(f"\nAPI call failed: {e}")
        # ---------------------------------------------------------------------

    else:
        print("\nFailed to obtain a valid Azure access token. Exiting.", file=sys.stderr)
        sys.exit(1)

    print("\n--- Script Finished ---")

Para sua informação: fiz login na Interface de Linha de Comando (CLI) do Azure via `az login`: como posso ver quando ele vai me desconectar?

Testado no Ubuntu 16.04.5 LTS e Python 3.12.