Update /me endpoint for Microsoft accounts

[drewler]

sync-engine/inbox/auth/microsoft.py

Line 37 in e19ff46

OAUTH_USER_INFO_URL = "https://outlook.office.com/api/v2.0/me"

Used in _get_user_info.

• Should use https://graph.microsoft.com/v1.0/me instead.
• Since the scope required (User.Read) is different from the ones in OAUTH_SCOPE, I suggest the following approach:
  • Override _get_user_info in MicrosoftAuthHandler, so it calls the parent method with a copy of session_dict where session_dict["access_token"] has been replaced with an access token with the right scope.
  • That access token (with User.Read scope) has to be requested just before calling the parent method, using the AuthAlligator client.

[drewler]

I think this URL is only used during the "Authorization Code" grant:

• Read from _get_user_info
  • Called from _get_authenticated_user
    • Called from interactive_auth
      • Called from inbox-auth script

Since this is not part of the main flow, updating this endpoint has lower priority and we can leave if for later.