Fixed bug for MT.1005 and MT.1027

[tdcthosc]

MT.1005: Fix automatically detection of emergency access when no excluded users or groups exists in any conditional access policies

#20 (comment)

MT.1027: Fixed bug if no Service Principals with App Registrations exists, which causes the test to fail.

Below will return 'Bad Request' if '$PrivilegedAppIds' is null.

$PrincipalWithAppSecret = ($PrivilegedAppIds | ForEach-Object { Invoke-MtGraphRequest "applications(appId='$($_)')" -ApiVersion beta } | Where-Object { $null -ne $_.passwordCredentials }).appId

Fixed by checking if '$PrivilegedAppIds' has a value.

If ($PrivilegedAppIds) {
  $PrincipalWithAppSecret = ($PrivilegedAppIds | ForEach-Object { Invoke-MtGraphRequest "applications(appId='$($_)')" -ApiVersion beta } | Where-Object { $null -ne $_.passwordCredentials }).appId
}

Below will return the values of '$DirectAssignments' because '$_.Principal.AppId' does not exist and '$PrincipalWithSecrets' is null, which results in 'Where-Object' to find where 'null' is equal to 'null'.

$DirectAssignments | Where-Object { $_.Principal.AppId -in $PrincipalWithSecrets }

Fixed by checking if '$PrincipalWithSecrets' has a value.

If ($PrincipalWithSecrets) {
  $DirectAssignments | Where-Object { $_.Principal.AppId -in $PrincipalWithSecrets }
}