Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

Allow specifiying the username in scripts/generate-oidc-token

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2022-07-15 19:12:17 +02:00
parent ff52cbd435
commit 82bead6642
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
scripts/generate-oidc-token
View file

@ -34,7 +34,7 @@ Run this SQL against Ipsilon's database:
--------START CUTTING HERE-------- --------START CUTTING HERE--------
BEGIN; BEGIN;
insert into token values ('{uuid}','username','{service_name}@service'); insert into token values ('{uuid}','username','{username}');
insert into token values ('{uuid}','security_check','{secret}'); insert into token values ('{uuid}','security_check','{secret}');
insert into token values ('{uuid}','client_id','{service_name}'); insert into token values ('{uuid}','client_id','{service_name}');
insert into token values ('{uuid}','expires_at','{expiration}'); insert into token values ('{uuid}','expires_at','{expiration}');
@ -71,7 +71,9 @@ def validate_scopes(ctx, param, scopes):
@click.option('--scope', '-s', multiple=True, callback=validate_scopes, @click.option('--scope', '-s', multiple=True, callback=validate_scopes,
help='A scope to include for this token. May be supplied multiple times.') help='A scope to include for this token. May be supplied multiple times.')
@click.option('--no-openid', is_flag=True, help='Do not use "openid" as the first item in scope.') @click.option('--no-openid', is_flag=True, help='Do not use "openid" as the first item in scope.')
def generate_token(service_name, expiration, scope, no_openid): @click.option('--username', '-u', default=None,
help='The username associated with the token. Defaults to SERVICE_NAME@service.')
def generate_token(service_name, expiration, scope, no_openid, username):
""" """
Print out SQL to insert a token in the Ipsilon database, and the token itself. Print out SQL to insert a token in the Ipsilon database, and the token itself.
@ -87,8 +89,10 @@ def generate_token(service_name, expiration, scope, no_openid):
scope.insert(0, 'openid') scope.insert(0, 'openid')
scope = json.dumps(scope) scope = json.dumps(scope)
username = username or "{}@service".format(service_name)
print(template.format(uuid=identifier, service_name=service_name, secret=secret, print(template.format(uuid=identifier, service_name=service_name, secret=secret,
expiration=expiration, scope=scope, now=now)) expiration=expiration, scope=scope, username=username, now=now))
print("Token: {}_{}\n".format(identifier, secret)) print("Token: {}_{}\n".format(identifier, secret))