def update_key(key):
if not request.json:
raise ApiError('nothing to change', 400)
if not current_app.config['AUTH_REQUIRED']:
key = ApiKey.find_by_id(key)
elif Scope.admin in g.scopes or Scope.admin_keys in g.scopes:
key = ApiKey.find_by_id(key)
else:
key = ApiKey.find_by_id(key, user=g.login)
if not key:
raise ApiError('not found', 404)
update = request.json
update['customer'] = assign_customer(wanted=update.get('customer'), permission=Scope.admin_keys)
for want_scope in update.get('scopes', []):
if not Permission.is_in_scope(want_scope, have_scopes=g.scopes):
raise ApiError("Requested scope '{}' not in existing scopes: {}".format(
want_scope, ','.join(g.scopes)), 403)
admin_audit_trail.send(current_app._get_current_object(), event='apikey-updated', message='', user=g.login,
customers=g.customers, scopes=g.scopes, resource_id=key.id, type='apikey', request=request)
if key.update(**request.json):
return jsonify(status='ok')
else:
raise ApiError('failed to update API key', 500)
def get_key(key):
if not current_app.config['AUTH_REQUIRED']:
key = ApiKey.find_by_id(key)
elif Scope.admin in g.scopes or Scope.admin_keys in g.scopes:
key = ApiKey.find_by_id(key)
else:
user = g.get('login', None)
key = ApiKey.find_by_id(key, user)
if key:
return jsonify(status='ok', total=1, key=key.serialize)
else:
raise ApiError('not found', 404)
def get_key(key):
if not current_app.config['AUTH_REQUIRED']:
key = ApiKey.find_by_id(key)
elif Scope.admin in g.scopes or Scope.admin_keys in g.scopes:
key = ApiKey.find_by_id(key)
else:
user = g.get('login', None)
key = ApiKey.find_by_id(key, user)
if key:
return jsonify(status='ok', total=1, key=key.serialize)
else:
raise ApiError('not found', 404)
def delete_key(key):
key = ApiKey.find_by_id(key)
if not key:
raise ApiError("not found", 404)
if key.delete():
return jsonify(status="ok")
else:
raise ApiError("failed to delete API key", 500)
def delete_key(key):
key = ApiKey.find_by_id(key)
if not key:
raise ApiError("not found", 404)
if key.delete():
return jsonify(status="ok")
else:
raise ApiError("failed to delete API key", 500)
def delete_key(key):
key = ApiKey.find_by_id(key)
if not key:
raise ApiError('not found', 404)
if key.delete():
return jsonify(status='ok')
else:
raise ApiError('failed to delete API key', 500)
def update_key(key):
if not request.json:
raise ApiError('nothing to change', 400)
if not current_app.config['AUTH_REQUIRED']:
key = ApiKey.find_by_id(key)
elif Scope.admin in g.scopes or Scope.admin_keys in g.scopes:
key = ApiKey.find_by_id(key)
else:
key = ApiKey.find_by_id(key, user=g.login)
if not key:
raise ApiError('not found', 404)
update = request.json
update['customer'] = assign_customer(wanted=update.get('customer'),
permission=Scope.admin_keys)
for want_scope in update.get('scopes', []):
if not Permission.is_in_scope(want_scope, have_scopes=g.scopes):
raise ApiError(
"Requested scope '{}' not in existing scopes: {}".format(
want_scope, ','.join(g.scopes)), 403)
admin_audit_trail.send(current_app._get_current_object(),
event='apikey-updated',
message='',
user=g.login,
customers=g.customers,
scopes=g.scopes,
resource_id=key.id,
type='apikey',
request=request)
updated = key.update(**request.json)
if updated:
return jsonify(status='ok', key=updated.serialize)
else:
raise ApiError('failed to update API key', 500)
def delete_key(key):
key = ApiKey.find_by_id(key)
if not key:
raise ApiError('not found', 404)
admin_audit_trail.send(current_app._get_current_object(), event='apikey-deleted', message='', user=g.login,
customers=g.customers, scopes=g.scopes, resource_id=key.id, type='apikey', request=request)
if key.delete():
return jsonify(status='ok')
else:
raise ApiError('failed to delete API key', 500)
def delete_key(key):
key = ApiKey.find_by_id(key)
if not key:
raise ApiError('not found', 404)
admin_audit_trail.send(current_app._get_current_object(),
event='apikey-deleted',
message='',
user=g.login,
customers=g.customers,
scopes=g.scopes,
resource_id=key.id,
type='apikey',
request=request)
if key.delete():
return jsonify(status='ok')
else:
raise ApiError('failed to delete API key', 500)
def update_key(key):
if not request.json:
raise ApiError('nothing to change', 400)
key = ApiKey.find_by_id(key)
if not key:
raise ApiError('not found', 404)
admin_audit_trail.send(current_app._get_current_object(),
event='apikey-updated',
message='',
user=g.user,
customers=g.customers,
scopes=g.scopes,
resource_id=key.id,
type='apikey',
request=request)
if key.update(**request.json):
return jsonify(status='ok')
else:
raise ApiError('failed to update API key', 500)
