mirror of
https://github.com/GSA/notifications-admin.git
synced 2026-07-22 08:58:46 -04:00
renamed api_keys file
This commit is contained in:
chrisw
201
app/main/views/api_integration.py
Normal file
201
app/main/views/api_integration.py
Normal file
@@ -0,0 +1,201 @@
|
||||
from flask import request, render_template, redirect, url_for, flash, Markup, abort
|
||||
from flask_login import login_required, current_user
|
||||
from app.main import main
|
||||
from app.main.forms import CreateKeyForm, Whitelist, ServiceCallbacksForm
|
||||
from app import api_key_api_client, service_api_client, notification_api_client, current_service
|
||||
from app.utils import user_has_permissions, email_safe
|
||||
from app.notify_client.api_key_api_client import KEY_TYPE_NORMAL, KEY_TYPE_TEST, KEY_TYPE_TEAM
|
||||
|
||||
dummy_bearer_token = 'bearer_token_set'
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api")
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', admin_override=True)
|
||||
def api_integration(service_id):
|
||||
return render_template(
|
||||
'views/api/index.html',
|
||||
api_notifications=notification_api_client.get_api_notifications_for_service(service_id)
|
||||
)
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/documentation")
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', admin_override=True)
|
||||
def api_documentation(service_id):
|
||||
return redirect(url_for('.documentation'), code=301)
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/whitelist", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', admin_override=True)
|
||||
def whitelist(service_id):
|
||||
form = Whitelist()
|
||||
if form.validate_on_submit():
|
||||
service_api_client.update_whitelist(service_id, {
|
||||
'email_addresses': list(filter(None, form.email_addresses.data)),
|
||||
'phone_numbers': list(filter(None, form.phone_numbers.data))
|
||||
})
|
||||
flash('Whitelist updated', 'default_with_tick')
|
||||
return redirect(url_for('.api_integration', service_id=service_id))
|
||||
if not form.errors:
|
||||
form.populate(**service_api_client.get_whitelist(service_id))
|
||||
return render_template(
|
||||
'views/api/whitelist.html',
|
||||
form=form
|
||||
)
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/keys")
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', admin_override=True)
|
||||
def api_keys(service_id):
|
||||
return render_template(
|
||||
'views/api/keys.html',
|
||||
keys=api_key_api_client.get_api_keys(service_id=service_id)['apiKeys']
|
||||
)
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/keys/create", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys')
|
||||
def create_api_key(service_id):
|
||||
key_names = [
|
||||
key['name'] for key in api_key_api_client.get_api_keys(service_id=service_id)['apiKeys']
|
||||
]
|
||||
form = CreateKeyForm(key_names)
|
||||
form.key_type.choices = [
|
||||
(KEY_TYPE_NORMAL, 'Live – sends to anyone'),
|
||||
(KEY_TYPE_TEAM, 'Team and whitelist – limits who you can send to'),
|
||||
(KEY_TYPE_TEST, 'Test – pretends to send messages'),
|
||||
]
|
||||
disabled_options, option_hints = [], {}
|
||||
if current_service['restricted']:
|
||||
disabled_options = [KEY_TYPE_NORMAL]
|
||||
option_hints[KEY_TYPE_NORMAL] = Markup(
|
||||
'Not available because your service is in '
|
||||
'<a href="{}#trial-mode">trial mode</a>'.format(url_for(".using_notify"))
|
||||
)
|
||||
if 'letter' in current_service['permissions']:
|
||||
option_hints[KEY_TYPE_TEAM] = 'Can’t be used to send letters'
|
||||
if form.validate_on_submit():
|
||||
if form.key_type.data in disabled_options:
|
||||
abort(400)
|
||||
secret = api_key_api_client.create_api_key(
|
||||
service_id=service_id,
|
||||
key_name=form.key_name.data,
|
||||
key_type=form.key_type.data
|
||||
)
|
||||
return render_template(
|
||||
'views/api/keys/show.html',
|
||||
secret=secret,
|
||||
service_id=service_id,
|
||||
key_name=email_safe(form.key_name.data, whitespace='_')
|
||||
)
|
||||
return render_template(
|
||||
'views/api/keys/create.html',
|
||||
form=form,
|
||||
disabled_options=disabled_options,
|
||||
option_hints=option_hints
|
||||
)
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/keys/revoke/<key_id>", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
@user_has_permissions('manage_api_keys', admin_override=True)
|
||||
def revoke_api_key(service_id, key_id):
|
||||
key_name = api_key_api_client.get_api_keys(service_id=service_id, key_id=key_id)['apiKeys'][0]['name']
|
||||
if request.method == 'GET':
|
||||
return render_template(
|
||||
'views/api/keys.html',
|
||||
revoke_key=key_name,
|
||||
keys=api_key_api_client.get_api_keys(service_id=service_id)['apiKeys'],
|
||||
)
|
||||
elif request.method == 'POST':
|
||||
api_key_api_client.revoke_api_key(service_id=service_id, key_id=key_id)
|
||||
flash('‘{}’ was revoked'.format(key_name), 'default_with_tick')
|
||||
return redirect(url_for('.api_keys', service_id=service_id))
|
||||
|
||||
|
||||
def get_apis():
|
||||
callback_api = None
|
||||
inbound_api = None
|
||||
if current_service['service_callback_api']:
|
||||
callback_api = service_api_client.get_service_callback_api(
|
||||
current_service['id'],
|
||||
current_service.get('service_callback_api')[0]
|
||||
)
|
||||
if current_service['inbound_api']:
|
||||
inbound_api = service_api_client.get_service_inbound_api(
|
||||
current_service['id'],
|
||||
current_service.get('inbound_api')[0]
|
||||
)
|
||||
|
||||
return (callback_api, inbound_api)
|
||||
|
||||
|
||||
def check_token_against_dummy_bearer(token):
|
||||
if token != dummy_bearer_token:
|
||||
return token
|
||||
else:
|
||||
return ''
|
||||
|
||||
|
||||
@main.route("/services/<service_id>/api/callbacks", methods=['GET', 'POST'])
|
||||
@login_required
|
||||
def api_callbacks(service_id):
|
||||
callback_api, inbound_api = get_apis()
|
||||
can_receive_inbound = 'inbound_sms' in current_service['permissions']
|
||||
|
||||
form = ServiceCallbacksForm(
|
||||
inbound_url=inbound_api.get('url') if inbound_api else '',
|
||||
inbound_bearer_token=dummy_bearer_token if inbound_api else '',
|
||||
outbound_url=callback_api.get('url') if callback_api else '',
|
||||
outbound_bearer_token=dummy_bearer_token if callback_api else '',
|
||||
can_receive_inbound=can_receive_inbound,
|
||||
)
|
||||
|
||||
if form.validate_on_submit():
|
||||
if callback_api:
|
||||
if (callback_api.get('url') != form.outbound_url.data
|
||||
or form.outbound_bearer_token.data != dummy_bearer_token):
|
||||
service_api_client.update_service_callback_api(
|
||||
service_id,
|
||||
url=form.outbound_url.data,
|
||||
bearer_token=check_token_against_dummy_bearer(form.outbound_bearer_token.data),
|
||||
user_id=current_user.id,
|
||||
callback_api_id=callback_api.get('id')
|
||||
)
|
||||
else:
|
||||
service_api_client.create_service_callback_api(
|
||||
service_id,
|
||||
url=form.outbound_url.data,
|
||||
bearer_token=form.outbound_bearer_token.data,
|
||||
user_id=current_user.id
|
||||
)
|
||||
if can_receive_inbound:
|
||||
if inbound_api:
|
||||
if (inbound_api.get('url') != form.inbound_url.data
|
||||
or form.inbound_bearer_token.data != dummy_bearer_token):
|
||||
service_api_client.update_service_inbound_api(
|
||||
service_id,
|
||||
url=form.inbound_url.data,
|
||||
bearer_token=check_token_against_dummy_bearer(form.inbound_bearer_token.data),
|
||||
user_id=current_user.id,
|
||||
inbound_api_id=inbound_api.get('id')
|
||||
)
|
||||
else:
|
||||
service_api_client.create_service_inbound_api(
|
||||
service_id,
|
||||
url=form.inbound_url.data,
|
||||
bearer_token=form.inbound_bearer_token.data,
|
||||
user_id=current_user.id
|
||||
)
|
||||
|
||||
return redirect(url_for('.api_integration', service_id=service_id))
|
||||
|
||||
return render_template(
|
||||
'views/api/callbacks.html',
|
||||
form=form,
|
||||
can_receive_inbound=can_receive_inbound,
|
||||
)
|
||||
Reference in New Issue
Block a user