mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-10 15:22:24 -05:00
78 lines
2.6 KiB
Python
78 lines
2.6 KiB
Python
from flask import Blueprint, jsonify, request
|
|
|
|
from app.dao.users_dao import get_user_by_id
|
|
from app.dao.webauthn_credential_dao import (
|
|
dao_create_webauthn_credential,
|
|
dao_delete_webauthn_credential,
|
|
dao_get_webauthn_credential_by_user_and_id,
|
|
dao_update_webauthn_credential_name,
|
|
)
|
|
from app.errors import InvalidRequest, register_errors
|
|
from app.schema_validation import validate
|
|
from app.utils import check_suspicious_id
|
|
from app.webauthn.webauthn_schema import (
|
|
post_create_webauthn_credential_schema,
|
|
post_update_webauthn_credential_schema,
|
|
)
|
|
|
|
webauthn_blueprint = Blueprint(
|
|
"webauthn", __name__, url_prefix="/user/<uuid:user_id>/webauthn"
|
|
)
|
|
register_errors(webauthn_blueprint)
|
|
|
|
|
|
@webauthn_blueprint.route("", methods=["GET"])
|
|
def get_webauthn_credentials(user_id):
|
|
user = get_user_by_id(user_id)
|
|
return jsonify(data=[cred.serialize() for cred in user.webauthn_credentials]), 200
|
|
|
|
|
|
@webauthn_blueprint.route("", methods=["POST"])
|
|
def create_webauthn_credential(user_id):
|
|
check_suspicious_id(user_id)
|
|
data = request.get_json()
|
|
validate(data, post_create_webauthn_credential_schema)
|
|
webauthn_credential = dao_create_webauthn_credential(
|
|
user_id=user_id,
|
|
name=data["name"],
|
|
credential_data=data["credential_data"],
|
|
registration_response=data["registration_response"],
|
|
)
|
|
|
|
return jsonify(data=webauthn_credential.serialize()), 201
|
|
|
|
|
|
@webauthn_blueprint.route("/<uuid:webauthn_credential_id>", methods=["POST"])
|
|
def update_webauthn_credential(user_id, webauthn_credential_id):
|
|
check_suspicious_id(user_id, webauthn_credential_id)
|
|
data = request.get_json()
|
|
validate(data, post_update_webauthn_credential_schema)
|
|
|
|
webauthn_credential = dao_get_webauthn_credential_by_user_and_id(
|
|
user_id, webauthn_credential_id
|
|
)
|
|
|
|
dao_update_webauthn_credential_name(webauthn_credential, data["name"])
|
|
|
|
return jsonify(data=webauthn_credential.serialize()), 200
|
|
|
|
|
|
@webauthn_blueprint.route("/<uuid:webauthn_credential_id>", methods=["DELETE"])
|
|
def delete_webauthn_credential(user_id, webauthn_credential_id):
|
|
check_suspicious_id(user_id, webauthn_credential_id)
|
|
webauthn_credential = dao_get_webauthn_credential_by_user_and_id(
|
|
user_id, webauthn_credential_id
|
|
)
|
|
user = get_user_by_id(user_id)
|
|
|
|
if len(user.webauthn_credentials) == 1:
|
|
# TODO: Only raise an error if user has auth type AuthType.WEBAUTHN
|
|
raise InvalidRequest(
|
|
"Cannot delete last remaining webauthn credential for user",
|
|
status_code=400,
|
|
)
|
|
|
|
dao_delete_webauthn_credential(webauthn_credential)
|
|
|
|
return "", 204
|