@echo off
az login --allow-no-subscriptions

REM Create the app
az ad app create ^
  --display-name "DialogLohnMailClient" ^
  --sign-in-audience AzureADMyOrg ^
  --is-fallback-public-client true ^
  --public-client-redirect-uris "https://login.microsoftonline.com/common/oauth2/nativeclient" ^
  --required-resource-access "[{""resourceAppId"":""00000003-0000-0000-c000-000000000000"",""resourceAccess"":[{""id"":""258f6531-6087-4cc4-bb90-092c5fb3ed3f"",""type"":""Scope""},{""id"":""b633e1c5-b582-4048-a93e-9f11b44c7e96"",""type"":""Role""}]}]" ^
  --output json > app.json

FOR /F "tokens=2 delims=:," %%i IN ('findstr "appId" app.json') DO set appId=%%~i

REM Reset credentials
az ad app credential reset --id %appId% --append --display-name "thrid" --years 1 --output json > secret.json

FOR /F "tokens=2 delims=:," %%i IN ('findstr "password" secret.json') DO set clientSecret=%%~i

FOR /F %%i IN ('az account show --query tenantId -o tsv') DO set tenantId=%%i

echo ======================================
echo Client ID: %appId%
echo Tenant ID: %tenantId%
echo Client Secret: %clientSecret%
echo ======================================