/ - Diff - Synnefo - Greek Research and Technology Network's projects

Revision d29f0371

     Fallback call which receives the user token or the user uuid/token pair and
     returns back the token as well as information about the token holder and the
     services he/she can access.
     If not request body is provided (the request content length is missing or
     equals to 0) the response contains only non authentication protected
     information (the service catalog).
     ========================================= =========  ==================
     Uri                                       Method     Description
-...
     ::
         {"access": {
             "token": {
                 "expires": "2013-06-19T15:23:59.975572+00:00",
                 "id": "CDEe2k0T/HdiJWBMMbHyOA==",
                 "tenant": {
                     "id": "c18088be-16b1-4263-8180-043c54e22903",
                     "name": "Firstname Lastname"
+                }
             },
             "serviceCatalog": [
                {"SNF:uiURL": "https://node2.example.com/ui/",
                 "endpoints": [{
                     "publicURL": "https://object-store.example.synnefo.org/pithos/public/v2.0",
                     "versionId": "v2.0"}],
                 "endpoints_links": [],
                 "name": "pithos_public",
                 "type": "public"},
                {"SNF:uiURL": "https://node2.example.com/ui/",
                 "endpoints": [{
                     "publicURL": "https://object-store.example.synnefo.org/pithos/object-store/v1",
                     "versionId": "v1"}],
                 "endpoints_links": [],
                 "name": "pithos_object-store",
                 "type": "object-store"},
                {"SNF:uiURL": "https://node2.example.com/ui/",
                 "endpoints": [{
                     "publicURL": "https://object-store.example.synnefo.org/pithos/ui",
                     "versionId": ""}],
                 "endpoints_links": [],
                 "name": "pithos_ui",
                 "type": "pithos_ui"},
                {"SNF:uiURL": "http://localhost:8080",
                 "endpoints": [{
                     "publicURL": "https://accounts.example.synnefo.org/ui/v1.0",
                     "versionId": "v1.0"}],
                 "endpoints_links": [],
                 "name": "astakos_ui",
                 "type": "astakos_ui"},
                {"SNF:uiURL": "http://localhost:8080",
                 "endpoints": [{
                     "publicURL": "https://accounts.example.synnefo.org/account/v1.0",
                     "versionId": "v1.0"}],
                 "endpoints_links": [],
                 "name": "astakos_account",
                 "type": "account"},
                {"SNF:uiURL": "http://localhost:8080",
                 "endpoints": [{
                     "publicURL": "https://accounts.example.synnefo.org/identity/v2.0",
                     "versionId": "v2.0"}],
                 "endpoints_links": [],
                 "name": "astakos_identity",
                 "type": "identity"}],
           "token": {
               "expires": "2013-06-19T15:23:59.975572+00:00",
                "id": "CDEe2k0T/HdiJWBMMbHyOA",
                "tenant": {"id": "c18088be-16b1-4263-8180-043c54e22903",
                 "name": "Firstname Lastname"}},
           "user": {
               "id": "c18088be-16b1-4263-8180-043c54e22903",
                "name": "Firstname Lastname",
                "roles": [{"id": 1, "name": "default"},
                "roles_links": []}}}
                 {"endpoints_links": [],
                  "endpoints": [{
                     "SNF:uiURL": "https://accounts.example.synnefo.org/ui",
                     "versionId": "v1.0",
                     "publicURL": "https://accounts.example.synnefo.org/account/v1.0"}],
                  "type": "account",
                  "name": "astakos_account"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://accounts.example.synnefo.org/ui",
                      "versionId": "v2.0",
                      "publicURL": "https://accounts.example.synnefo.org/account/v2.0"}],
                  "type": "identity",
                  "name": "astakos_identity"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://cyclades.example.synnefo.org/ui",
                      "versionId": "v2.0",
                      "publicURL": "https://cyclades.example.synnefo.org/cyclades/compute/v2.0"}],
                  "type": "compute",
                  "name": "cyclades_compute"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://cyclades.example.synnefo.org/ui",
                      "versionId": "v1.0",
                      "publicURL": "https://cyclades.example.synnefo.org/cyclades/vmapi/v1.0"}],
                  "type": "cyclades_vmapi",
                  "name": "cyclades_vmapi"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://cyclades.example.synnefo.org/ui",
                      "versionId": "v1.0",
                      "publicURL": "https://cyclades.example.synnefo.org/cyclades/image/v1.0"}],
                  "type": "image",
                  "name": "cyclades_plankton"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://object-store.example.synnefo.org/ui",
                      "versionId": "v2.0",
                      "publicURL": "https://object-store.example.synnefo.org/pithos/public/v2.0"}],
                  "type": "public",
                  "name": "pithos_public"},
                 {"endpoints_links": [],
                  "endpoints": [{
                      "SNF:uiURL": "https://object-store.example.synnefo.org/ui",
                      "versionId": "v1",
                      "publicURL": "https://object-store.example.synnefo.org/pithos/object-store/v1"}],
                  "type": "object-store",
                  "name": "pithos_object-store"}],
              "user": {
                  "roles_links": [],
                  "id": "c18088be-16b1-4263-8180-043c54e22903",
                  "roles": [{"id": 1, "name": "default"}],
                  "name": "Firstname Lastname"}}}
     Example xml response:
-...
         <access xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xmlns="http://docs.openstack.org/identity/api/v2.0">
             <token id="CDEe2k0T/HdiJWBMMbHyOA" expires="2013-06-19T15:23:59.975572+00:00">
             <token id="CDEe2k0T/HdiJWBMMbHyOA==" expires="2013-06-19T15:23:59.975572+00:00">
                 <tenant id="c18088be-16b1-4263-8180-043c54e22903" name="Firstname Lastname" />
             </token>
             <user id="c18088be-16b1-4263-8180-043c54e22903" name="Firstname Lastname">
-...
                 </roles>
             </user>
             <serviceCatalog>
                 <service type="public" name="pithos_public" SNF:uiURL="">
                         <endpoint
                                 versionId="v2.0"
                                 publicURL="https://object-store.example.synnefo.org/pithos/public/v2.0"
                 <service type="account" name="astakos_account">
                     <endpoint  SNF:uiURL="https://accounts.example.synnefo.org/ui"  versionId="v1.0"  publicURL="https://accounts.example.synnefo.org/account/v1.0"  />
                 </service>
                 <service type="object-store" name="pithos_object-store" SNF:uiURL="">
                         <endpoint
                                 versionId="v1"
                                 publicURL="https://object-store.example.synnefo.org/pithos/object-store/v1"
                 <service type="identity" name="astakos_identity">
                     <endpoint  SNF:uiURL="https://accounts.example.synnefo.org/ui"  versionId="v2.0"  publicURL="https://accounts.example.synnefo.org/account/v2.0"  />
                 </service>
                 <service type="pithos_ui" name="pithos_ui" SNF:uiURL="">
                         <endpoint
                                 versionId=""
                                 publicURL="https://object-store.example.synnefo.org/pithos/ui"
                 <service type="compute" name="cyclades_compute">
                     <endpoint  SNF:uiURL="https://cyclades.example.synnefo.org/ui"  versionId="v2.0"  publicURL="https://cyclades.example.synnefo.org/cyclades/compute/v2.0"  />
                 </service>
                 <service type="astakos_ui" name="astakos_ui" SNF:uiURL="">
                         <endpoint
                                 versionId="v1.0"
                                 publicURL="https://accounts.example.synnefo.org/ui/v1.0"
                 <service type="cyclades_vmapi" name="cyclades_vmapi">
                     <endpoint  SNF:uiURL="https://cyclades.example.synnefo.org/ui"  versionId="v1.0"  publicURL="https://cyclades.example.synnefo.org/cyclades/vmapi/v1.0"  />
                 </service>
                 <service type="account" name="astakos_account" SNF:uiURL="">
                         <endpoint
                                 versionId="v1.0"
                                 publicURL="https://accounts.example.synnefo.org/account/v1.0"
                 <service type="image" name="cyclades_plankton">
                     <endpoint  SNF:uiURL="https://cyclades.example.synnefo.org/ui"  versionId="v1.0"  publicURL="https://cyclades.example.synnefo.org/cyclades/image/v1.0"  />
                 </service>
                 <service type="identity" name="astakos_identity" SNF:uiURL="">
                         <endpoint
                                 versionId="v2.0"
                                 publicURL="https://accounts.example.synnefo.org/identity/v2.0"
                 <service type="public" name="pithos_public">
                     <endpoint  SNF:uiURL="https://object-store.example.synnefo.org/ui"  versionId="v2.0"  publicURL="https://object-store.example.synnefo.org/pithos/public/v2.0"  />
                 </service>
                 <service type="object-store" name="pithos_object-store">
                     <endpoint  SNF:uiURL="https://object-store.example.synnefo.org/ui"  versionId="v1"  publicURL="https://object-store.example.synnefo.org/pithos/object-store/v1"  /> </service>
             </serviceCatalog>
         </access>

     from snf_django.lib.api import faults, utils, api_method
     from astakos.im.models import Service, AstakosUser
     from .util import json_response, xml_response, validate_user
     from .util import json_response, xml_response, validate_user,\
         get_content_length
     import logging
     logger = logging.getLogger(__name__)
-...
     @api_method(http_method="POST", token_required=False, user_required=False,
                 logger=logger)
     def authenticate(request):
         req = utils.get_request_dict(request)
         content_length = get_content_length(request)
         public_mode = True if not content_length else False
         uuid = None
         try:
             token_id = req['auth']['token']['id']
         except KeyError:
         d = defaultdict(dict)
         if not public_mode:
             req = utils.get_request_dict(request)
             uuid = None
             try:
                 token_id = req['auth']['passwordCredentials']['password']
                 uuid = req['auth']['passwordCredentials']['username']
                 token_id = req['auth']['token']['id']
             except KeyError:
                 try:
                     token_id = req['auth']['passwordCredentials']['password']
                     uuid = req['auth']['passwordCredentials']['username']
                 except KeyError:
                     raise faults.BadRequest('Malformed request')
             if token_id is None:
                 raise faults.BadRequest('Malformed request')
         if token_id is None:
             raise faults.BadRequest('Malformed request')
             try:
                 user = AstakosUser.objects.get(auth_token=token_id)
             except AstakosUser.DoesNotExist:
                 raise faults.Unauthorized('Invalid token')
         try:
             user = AstakosUser.objects.get(auth_token=token_id)
         except AstakosUser.DoesNotExist:
             raise faults.Unauthorized('Invalid token')
             validate_user(user)
         validate_user(user)
             if uuid is not None:
                 if user.uuid != uuid:
                     raise faults.Unauthorized('Invalid credentials')
         if uuid is not None:
             if user.uuid != uuid:
                 raise faults.Unauthorized('Invalid credentials')
             d["access"]["token"] = {
                 "id": user.auth_token,
                 "expires": utils.isoformat(user.auth_token_expires),
                 "tenant": {"id": user.uuid, "name": user.realname}}
             d["access"]["user"] = {
                 "id": user.uuid, 'name': user.realname,
                 "roles": list(user.groups.values("id", "name")),
                 "roles_links": []}
         d = defaultdict(dict)
         d["access"]["token"] = {
             "id": user.auth_token,
             "expires": utils.isoformat(user.auth_token_expires),
             "tenant": {"id": user.uuid, "name": user.realname}}
         d["access"]["user"] = {
             "id": user.uuid, 'name': user.realname,
             "roles": list(user.groups.values("id", "name")),
             "roles_links": []}
         d["access"]["serviceCatalog"] = []
         append = d["access"]["serviceCatalog"].append
         for s in Service.objects.all().order_by("id"):

             return
         d[new] = d[old]
         del(d[old])
     def get_int_parameter(p):
         if p is not None:
             try:
                 p = int(p)
             except ValueError:
                 return None
             if p < 0:
                 return None
         return p
     def get_content_length(request):
         content_length = get_int_parameter(request.META.get('CONTENT_LENGTH'))
         if content_length is None:
             raise faults.LengthRequired('Missing or invalid Content-Length header')
         return content_length

     {% load filters %}
     <access xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xmlns="http://docs.openstack.org/identity/api/v2.0">
         {% if d.access.token %}
         <token id="{{d.access.token.id}}" expires="{{d.access.token.expires}}">
             <tenant id="{{d.access.token.tenant.id}}" name="{{d.access.token.tenant.name}}" />
         </token>
         {% endif %}
         {% if d.access.user %}
         <user id="{{d.access.user.id}}" name="{{d.access.user.name}}">
             <roles>
                 {% for r in d.access.user.roles %}
-...
                 {% endfor %}
             </roles>
         </user>
         {% endif %}
         <serviceCatalog>
         {% for s in d.access.serviceCatalog %}
             <service type="{{s.type}}" name="{{s.name}}" SNF:uiURL="{{s.component.url}}">
             <service type="{{s.type}}" name="{{s.name}}">
                 {% for e in s.endpoints %}
                 <endpoint {% for k, v in e.items %} {{k}}="{{v}}" {% endfor %} />
                 {% endfor %}

             r = client.get(url, post_data={})
             self.assertEqual(r.status_code, 400)
             # Malformed request
             url = reverse('astakos.api.tokens.authenticate')
             r = client.post(url, post_data={})
             self.assertEqual(r.status_code, 400)
             # check public mode
             r = client.post(url, CONTENT_LENGTH=0)
             self.assertEqual(r.status_code, 200)
             self.assertTrue(r['Content-Type'].startswith('application/json'))
             try:
                 body = json.loads(r.content)
             except Exception, e:
                 self.fail(e)
             self.assertTrue('token' not in body.get('access'))
             self.assertTrue('user' not in body.get('access'))
             self.assertTrue('serviceCatalog' in body.get('access'))
             # Check unsupported xml input
             url = reverse('astakos.api.tokens.authenticate')
-...
     #            body = minidom.parseString(r.content)
     #        except Exception, e:
     #            self.fail(e)
             # test public mode: json response

Also available in: Unified diff