def get_permission(perm_id):
try:
perm = crud.get_perm(db.session, perm_id)
return make_response(json.dumps(perm.safe_dict(), default=json_serial),
200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def get_user(user):
try:
user = crud.get_user(db.session, user)
return make_response(
json.dumps({"user": user.safe_dict()}, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def authenticate():
try:
auth_data = load_json_from_request(request)
jwt = auth.authenticate(db.session, auth_data)
return make_response(json.dumps({'jwt': jwt}), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def get_all_user_permissions(user):
try:
permissions = reports.get_all_user_permissions(db.session, user)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
else:
permissions_safe = list(map(lambda p: p.safe_dict(), permissions))
return make_response(json.dumps({"permissions": permissions_safe}, default=json_serial), 200)
def getGroupUsers(group):
try:
users = reports.getGroupUsers(db.session, group)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
else:
usersSafe = list(map(lambda p: p.safeDict(), users))
return make_response(json.dumps({"users": usersSafe}), 200)
def getUserGrups(user):
try:
groups = reports.getUserGrups(db.session, user)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
else:
groupsSafe = list(map(lambda p: p.safeDict(), groups))
return make_response(json.dumps({"groups": groupsSafe}), 200)
def get_group_users(group):
try:
users = reports.get_group_users(db.session, group)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
else:
users_safe = list(map(lambda p: p.safe_dict(), users))
return make_response(json.dumps({"users": users_safe}, default=json_serial), 200)
def list_tenants():
"""Returns a list containing all existing tenants in the system"""
try:
tenants = crud.list_tenants(db.session)
return make_response(json.dumps({"tenants": tenants}), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def get_group(group):
try:
group = crud.get_group(db.session, group)
group = group.safe_dict()
group['created_date'] = group['created_date'].isoformat()
return make_response(json.dumps(group, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def getAllUserPermissions(user):
try:
permissions = reports.getAllUserPermissions(db.session, user)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
else:
permissionsSafe = list(map(lambda p: p.safeDict(), permissions))
return make_response(json.dumps({
"permissions": permissionsSafe
}), 200)
def get_user_groups(user):
try:
groups = reports.get_user_groups(db.session, user)
except HTTPRequestError as err:
publish_alarm(err)
return format_response(err.errorCode, err.message)
else:
groups_safe = list(map(lambda p: p.safe_dict(), groups))
return make_response(
json.dumps({"groups": groups_safe}, default=json_serial), 200)
def pdpRequest():
try:
pdpData = loadJsonFromRequest(request)
veredict = pdpc.pdpMain(db.session, pdpData)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
else:
return make_response(json.dumps({
"decision": veredict,
"status": "ok"
}), 200)
def list_users():
try:
users = crud.search_user(
db.session,
# Optional search filters
request.args['username'] if 'username' in request.args else None
)
users_safe = list(map(lambda u: u.safe_dict(), users))
return make_response(json.dumps({"users": users_safe}, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def pdp_request():
try:
pdp_data = load_json_from_request(request)
veredict = pdpc.pdp_main(db.session, pdp_data)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
else:
return make_response(json.dumps({
"decision": veredict,
"status": "ok"
}, default=json_serial), 200)
def create_permission():
try:
requester = auth.get_jwt_payload(request.headers.get('Authorization'))
perm_data = load_json_from_request(request)
new_perm = crud.create_perm(db.session, perm_data, requester)
return make_response(json.dumps({
"status": 200,
"id": new_perm.id
}), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def create_group():
try:
requester = auth.get_jwt_payload(request.headers.get('Authorization'))
group_data = load_json_from_request(request)
new_group = crud.create_group(db.session, group_data, requester)
return make_response(json.dumps({
"status": 200,
"id": new_group.id
}, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def createGroup():
try:
requester = auth.getJwtPayload(request.headers.get('Authorization'))
groupData = loadJsonFromRequest(request)
newGroup = crud.createGroup(db.session, groupData, requester)
db.session.add(newGroup)
db.session.commit()
return make_response(json.dumps({
"status": 200,
"id": newGroup.id
}), 200)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
def list_group():
try:
groups = crud.search_group(
db.session,
# search filters
request.args['name'] if 'name' in request.args else None
)
groups_safe = list(map(lambda p: p.safe_dict(), groups))
for g in groups_safe:
g['created_date'] = g['created_date'].isoformat()
return make_response(json.dumps({"groups": groups_safe}, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def list_permissions():
try:
perms = crud.search_perm(
db.session,
# search filters
request.args['path'] if 'path' in request.args else None,
request.args['method'] if 'method' in request.args else None,
request.args['permission'] if 'permission' in request.args else None,
request.args['type'] if 'type' in request.args else None
)
permissions_safe = list(map(lambda p: p.safe_dict(), perms))
return make_response(json.dumps({"permissions": permissions_safe}, default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def create_user():
try:
requester = auth.get_jwt_payload(request.headers.get('Authorization'))
auth_data = load_json_from_request(request)
# Create user
new_user = crud.create_user(db.session, auth_data, requester)
# If no problems occur to create user (no exceptions), configure kong
kong_data = kong.configure_kong(new_user.username)
if kong_data is None:
return format_response(
500, 'failed to configure verification subsystem')
new_user.secret = kong_data['secret']
new_user.key = kong_data['key']
new_user.kongId = kong_data['kongid']
db.session.add(new_user)
db.session.commit()
group_success = []
group_failed = []
if 'profile' in auth_data.keys():
group_success, group_failed = rship. \
add_user_many_groups(db.session, new_user.id,
auth_data['profile'], requester)
db.session.commit()
if conf.emailHost != 'NOEMAIL':
pwdc.create_password_set_request(db.session, new_user)
db.session.commit()
if crud.count_tenant_users(db.session, new_user.service) == 1:
log().info("will emit tenant lifecycle event {} - CREATE".format(
new_user.service))
send_notification({"type": 'CREATE', 'tenant': new_user.service})
return make_response(
json.dumps(
{
"user": new_user.safeDict(),
"groups": group_success,
"could not add": group_failed,
"message": "user created"
},
default=json_serial), 200)
except HTTPRequestError as err:
return format_response(err.errorCode, err.message)
def createUser():
try:
requester = auth.getJwtPayload(request.headers.get('Authorization'))
authData = loadJsonFromRequest(request)
# Create user
newUser = crud.createUser(db.session, authData, requester)
# If no problems occur to create user (no exceptions), configure kong
kongData = kong.configureKong(newUser.username)
if kongData is None:
return formatResponse(500,
'failed to configure verification subsystem')
newUser.secret = kongData['secret']
newUser.key = kongData['key']
newUser.kongId = kongData['kongid']
db.session.add(newUser)
db.session.commit()
groupSuccess = []
groupFailed = []
if 'profile' in authData.keys():
groupSuccess, groupFailed = rship. \
addUserManyGroups(db.session, newUser.id,
authData['profile'], requester)
db.session.commit()
if conf.emailHost != 'NOEMAIL':
pwdc.createPasswordSetRequest(db.session, newUser)
db.session.commit()
return make_response(json.dumps({
"user": newUser.safeDict(),
"groups": groupSuccess,
"could not add": groupFailed,
"message": "user created"
}), 200)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
def getUser(user):
try:
user = crud.getUser(db.session, user)
return make_response(json.dumps({"user": user.safeDict()}), 200)
except HTTPRequestError as err:
return formatResponse(err.errorCode, err.message)
