async def sync(
api_token_repo: ApiTokenRepo = Depends(ApiTokenRepo),
dns_server_repo: DnsServerRepo = Depends(DnsServerRepo),
token: TokenPayload = Depends(ScopedTo("api-token:syncable")),
):
scopes = token.scopes
if "api-token" in scopes or "api-token:syncable" in scopes:
api_token = None
dns_server = None
if not dns_server_repo.exists(name=token.payload.dns_server_name.lower()):
dns_server_repo.clear()
logger.info("saving dns server from api token")
dns_server = dns_server_repo.create(
dict(name=token.payload.dns_server_name.lower())
).results()
else:
dns_server = dns_server_repo.results()
if not api_token_repo.loads("dns_server").exists(token=token.token):
api_token_repo.clear()
logger.info("saving api token from auth token")
item = api_token_repo.create(
dict(
token=token.token,
scopes=" ".join(scopes),
dns_server=dns_server,
expires_at=datetime.utcfromtimestamp(float(token.exp)),
)
).data()
api_token_id = item.id
item = (
api_token_repo.clear()
.loads("dns_server")
.get(api_token_id)
.includes("dns_server")
.data()
)
else:
logger.info("token already exists in database")
item = api_token_repo.loads("dns_server").includes("dns_server").data()
return ApiTokenResponse(api_token=item)
else:
raise HTTPException(403, detail="Not found")
async def show(
api_token_id: int,
api_token_repo: ApiTokenRepo = Depends(ApiTokenRepo()),
token: TokenPayload = Depends(ScopedTo("api-token:read")),
includes: List[str] = Query(None),
):
if (not api_token_repo.loads("dns_server").strict().includes(
includes).exists(api_token_id)):
raise HTTPException(404, detail="Not found")
api_token = api_token_repo.data()
return ApiTokenResponse(api_token=api_token)
async def index(
sort_qs: SortQS = Depends(SortQS),
pagination: PaginationQS = Depends(PaginationQS),
api_token_repo: ApiTokenRepo = Depends(ApiTokenRepo()),
token: TokenPayload = Depends(ScopedTo("api-token:list")),
includes: List[str] = Query(None),
):
includes = only(includes, ["dns_server"], values=True)
pg, items = (api_token_repo.loads("dns_server").strict().sort(
sort_qs).paginate(pagination).includes(includes).data())
return ApiTokensResponse(pagination=pg, api_tokens=items)
async def sensitive(
api_token_id: int,
api_token_repo: ApiTokenRepo = Depends(ApiTokenRepo()),
token: TokenPayload = Depends(ScopedTo("api-token:read")),
includes: List[str] = Query(None),
):
# TODO: require stronger scope
if not api_token_repo.exists(api_token_id):
raise HTTPException(404, detail="Not found")
api_token = (api_token_repo.loads("dns_server").set_data_model(
SensitiveApiTokenData).includes(includes).data())
return SensitiveApiTokenResponse(api_token=api_token)