Support Microsoft Graph national cloud endpoints (GCC High)

[ronanflannery]

Hi, thanks for maintaining WinTuner.

I’m testing WinTuner in a Microsoft GCC High tenant. I found that the current Graph/MSAL flow assumes the global cloud endpoints (login.microsoftonline.com and graph.microsoft.com), which prevents use against GCC High (login.microsoftonline.us, graph.microsoft.us) and other soverign clouds.

Would you be open to adding optional Microsoft Graph national cloud endpoint support?

Suggested behavior:

• Keep Global as the default, so existing users are unaffected.
• Add an optional -Environment parameter to Connect-WtWinTuner.
• Support Global, USGov/GCC High, DoD, and China endpoint mappings.
• Route Graph client base URLs, token scopes, and MSAL authority hosts through a small endpoint map.

I have a working branch here:

https://github.com/ronanflannery/WinTuner/tree/feature/national-cloud-graph-support

Tested locally:

• dotnet test .\tests\WingetIntune.Tests\WingetIntune.Tests.csproj -> 95 passed
• Deploymnet of test App and App assignments worked correctly on GCC-H tenant.

Known limitation:

• Deploy-WtMsStoreApp still depends on the hosted WinTuner proxy for Microsoft Store metadata, so Store app deployment likely needs separate discussion/work. I did not dig into the purpose of this Proxy.

Also please note I am not a C# developer so this work was heavily AI assisted with Codex / Claude. However I have worked with Intune / M365 as administrator for many years now.

[svrooij]

You can open a pr with this change and I'll have a look at it.