huaweicloud-sdk-python-v3/huaweicloud-sdk-core/huaweicloudsdkcore/auth/iam_service.py

# coding: utf-8
"""
 Licensed to the Apache Software Foundation (ASF) under one
 or more contributor license agreements.  See the NOTICE file
 distributed with this work for additional information
 regarding copyright ownership.  The ASF licenses this file
 to you under the Apache LICENSE, Version 2.0 (the
 "LICENSE"); you may not use this file except in compliance
 with the LICENSE.  You may obtain a copy of the LICENSE at

     http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing,
 software distributed under the LICENSE is distributed on an
 "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 KIND, either express or implied.  See the LICENSE for the
 specific language governing permissions and limitations
 under the LICENSE.
"""

import json
import six
from huaweicloudsdkcore.exceptions.exceptions import ApiValueError, ServiceResponseException
from huaweicloudsdkcore.sdk_request import SdkRequest
from six.moves.urllib.parse import urlparse

DEFAULT_IAM_ENDPOINT = "https://iam.myhuaweicloud.com"
KEYSTONE_LIST_PROJECT_URI = "/v3/projects"
KEYSTONE_LIST_AUTH_DOMAINS_URI = "/v3/auth/domains"


def get_keystone_list_projects_request(iam_endpoint=None, region_id=None):
    url_parse_result = urlparse(iam_endpoint)
    schema = url_parse_result.scheme
    host = url_parse_result.netloc
    resource_path = KEYSTONE_LIST_PROJECT_URI
    query_params = [('name', region_id)]

    sdk_request = SdkRequest(method="GET", schema=schema, host=host, resource_path=resource_path, header_params={},
                             query_params=query_params, body="")

    return sdk_request


def keystone_list_projects(http_client, request):
    try:
        http_response = http_client.do_request_sync(request)
    except ServiceResponseException as e:
        raise e
    if http_response is not None and hasattr(http_response, "content"):
        content = getattr(http_response, "content")
        response = json.loads(six.ensure_str(content))
        if "projects" in response and len(response["projects"]) == 1:
            return response["projects"][0]["id"]
        elif "projects" in response and len(response["projects"]) > 1:
            raise ApiValueError("Multiple project ids have been returned, \
                 please specify one when initializing the credentials.")
        else:
            raise ApiValueError("No project id found, "
                                "please specify project_id manually when initializing the credentials.")
    else:
        raise ApiValueError("No project id found, "
                            "please specify project_id manually when initializing the credentials.")


def get_keystone_list_auth_domains_request(iam_endpoint=None):
    url_parse_result = urlparse(iam_endpoint)
    schema = url_parse_result.scheme
    host = url_parse_result.netloc
    resource_path = KEYSTONE_LIST_AUTH_DOMAINS_URI

    sdk_request = SdkRequest(method="GET", schema=schema, host=host, resource_path=resource_path, header_params={},
                             query_params=[], body="")

    return sdk_request


def keystone_list_auth_domains(http_client, request):
    try:
        http_response = http_client.do_request_sync(request)
    except ServiceResponseException as e:
        raise e
    if http_response is not None and hasattr(http_response, "content"):
        content = getattr(http_response, "content")
        response = json.loads(six.ensure_str(content))
        if "domains" in response and len(response["domains"]) == 1:
            return response["domains"][0]["id"]
        else:
            raise ApiValueError("No domain id found, please select one of the following solutions:\n\t"
                                "1. Manually specify domain_id when initializing the credentials.\n\t"
                                "2. Use the domain account to grant the current account permissions "
                                "of the IAM service.\n\t"
                                "3. Use AK/SK of the domain account.")
    else:
        raise ApiValueError("No domain id found, please select one of the following solutions:\n\t"
                            "1. Manually specify domain_id when initializing the credentials.\n\t"
                            "2. Use the domain account to grant the current account permissions of the IAM service.\n\t"
                            "3. Use AK/SK of the domain account.")