diff options
| author | Steve Martinelli <stevemar@ca.ibm.com> | 2013-05-21 00:57:19 -0500 |
|---|---|---|
| committer | Steve Martinelli <stevemar@ca.ibm.com> | 2013-06-26 11:40:30 -0500 |
| commit | dd3aa0b671fec6e6c23ae69016fdc06e7c529297 (patch) | |
| tree | 77253d47ad5a54f34cbc3c1ddd28870891fe5572 /openstackclient/identity | |
| parent | 1d7f6488c9bb02887400a4df164cfb093b488931 (diff) | |
| download | python-openstackclient-dd3aa0b671fec6e6c23ae69016fdc06e7c529297.tar.gz | |
Add OAuth support for Identity V3
Added client side support for:
* consumer CRUD
* create request token
* create access token
* authroize request token
blueprint: delegated-auth-via-oauth
Change-Id: I8d325fcab07ac4dfd124a6e55053ded8d6bf662e
Diffstat (limited to 'openstackclient/identity')
| -rw-r--r-- | openstackclient/identity/v3/oauth.py | 264 |
1 files changed, 264 insertions, 0 deletions
diff --git a/openstackclient/identity/v3/oauth.py b/openstackclient/identity/v3/oauth.py new file mode 100644 index 00000000..0b5ae4db --- /dev/null +++ b/openstackclient/identity/v3/oauth.py @@ -0,0 +1,264 @@ +# Copyright 2012-2013 OpenStack, LLC. +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. +# + +"""Identity v3 OAuth action implementations""" + +import logging +import sys + +from cliff import command +from cliff import lister +from cliff import show + +from openstackclient.common import utils + + +class AuthorizeRequestToken(show.ShowOne): + """Authorize request token command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.AuthorizeRequestToken') + + def get_parser(self, prog_name): + parser = super(AuthorizeRequestToken, self).get_parser(prog_name) + parser.add_argument( + '--request-key', + metavar='<request-key>', + help='Consumer key', + required=True + ) + parser.add_argument( + '--user-token', + metavar='<user-token>', + help='Token of authorizing user', + required=True + ) + parser.add_argument( + '--roles', + metavar='<roles>', + help='Role to authorize', + required=True + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + oauth_client = self.app.client_manager.identity.oauths + + verifier_pin = oauth_client.authorize_request_token( + parsed_args.request_key, parsed_args.user_token, + parsed_args.roles) + info = {} + info.update(verifier_pin._info) + return zip(*sorted(info.iteritems())) + + +class CreateAccessToken(show.ShowOne): + """Create access token command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.CreateAccessToken') + + def get_parser(self, prog_name): + parser = super(CreateAccessToken, self).get_parser(prog_name) + parser.add_argument( + '--consumer-key', + metavar='<consumer-key>', + help='Consumer key', + required=True + ) + parser.add_argument( + '--request-key', + metavar='<request-key>', + help='Consumer key', + required=True + ) + parser.add_argument( + '--verifier', + metavar='<verifier>', + help='Verifier Pin', + required=True + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + oauth_client = self.app.client_manager.identity.oauths + access_token = oauth_client.create_access_token( + parsed_args.consumer_key, parsed_args.request_key, + parsed_args.verifier) + info = {} + info.update(access_token._info) + return zip(*sorted(info.iteritems())) + + +class CreateConsumer(show.ShowOne): + """Create consumer command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.CreateConsumer') + + def get_parser(self, prog_name): + parser = super(CreateConsumer, self).get_parser(prog_name) + parser.add_argument( + 'name', + metavar='<consumer-name>', + help='New consumer name', + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + identity_client = self.app.client_manager.identity + consumer = identity_client.oauths.create_consumer( + parsed_args.name + ) + info = {} + info.update(consumer._info) + return zip(*sorted(info.iteritems())) + + +class CreateRequestToken(show.ShowOne): + """Create request token command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.CreateRequestToken') + + def get_parser(self, prog_name): + parser = super(CreateRequestToken, self).get_parser(prog_name) + parser.add_argument( + '--consumer-key', + metavar='<consumer-key>', + help='Consumer key', + required=True + ) + parser.add_argument( + '--roles', + metavar='<roles>', + help='Role requested', + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + oauth_client = self.app.client_manager.identity.oauths + request_token = oauth_client.create_request_token( + parsed_args.consumer_key, parsed_args.roles) + info = {} + info.update(request_token._info) + return zip(*sorted(info.iteritems())) + + +class DeleteConsumer(command.Command): + """Delete consumer command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.DeleteConsumer') + + def get_parser(self, prog_name): + parser = super(DeleteConsumer, self).get_parser(prog_name) + parser.add_argument( + 'consumer', + metavar='<consumer>', + help='Name or ID of consumer to delete', + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + identity_client = self.app.client_manager.identity + consumer = utils.find_resource( + identity_client.oauths, parsed_args.consumer) + identity_client.oauths.delete_consumer(consumer.id) + return + + +class ListConsumer(lister.Lister): + """List consumer command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.ListConsumer') + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + columns = ('ID', 'Name', 'Consumer Key', 'Consumer Secret') + data = self.app.client_manager.identity.oauths.list_consumers() + return (columns, + (utils.get_item_properties( + s, columns, + formatters={}, + ) for s in data)) + + +class SetConsumer(command.Command): + """Set consumer command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.SetConsumer') + + def get_parser(self, prog_name): + parser = super(SetConsumer, self).get_parser(prog_name) + parser.add_argument( + 'consumer', + metavar='<consumer>', + help='Name or ID of consumer to change', + ) + parser.add_argument( + '--name', + metavar='<new-consumer-name>', + help='New consumer name', + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + identity_client = self.app.client_manager.identity + consumer = utils.find_resource( + identity_client.oauths, parsed_args.consumer) + kwargs = {} + if parsed_args.name: + kwargs['name'] = parsed_args.name + + if not len(kwargs): + sys.stdout.write("Consumer not updated, no arguments present") + return + identity_client.oauths.update_consumer(consumer.id, **kwargs) + return + + +class ShowConsumer(show.ShowOne): + """Show consumer command""" + + api = 'identity' + log = logging.getLogger(__name__ + '.ShowConsumer') + + def get_parser(self, prog_name): + parser = super(ShowConsumer, self).get_parser(prog_name) + parser.add_argument( + 'consumer', + metavar='<consumer>', + help='Name or ID of consumer to display', + ) + return parser + + def take_action(self, parsed_args): + self.log.debug('take_action(%s)' % parsed_args) + identity_client = self.app.client_manager.identity + consumer = utils.find_resource( + identity_client.oauths, parsed_args.consumer) + + info = {} + info.update(consumer._info) + return zip(*sorted(info.iteritems())) |
