f08a3ab989
Since more auth plugins depending on v3._AuthConstructor are created in separated modules, this class should no longer be named as it was private. Auth plugins using v3._AuthConstructor currently are: - SAML2 auth plugin (under review) - oAuth auth plugin (merged with basecode) Change-Id: Ia097941a465a972dc7ca177a74c8fb8d21d219e6
56 lines
2.1 KiB
Python
56 lines
2.1 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
# implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from keystoneclient.auth.identity import v3
|
|
|
|
try:
|
|
from oauthlib import oauth1
|
|
except ImportError:
|
|
oauth1 = None
|
|
|
|
|
|
class OAuthMethod(v3.AuthMethod):
|
|
|
|
_method_parameters = ['consumer_key', 'consumer_secret',
|
|
'access_key', 'access_secret']
|
|
|
|
def __init__(self, **kwargs):
|
|
"""Construct an OAuth based authentication method.
|
|
|
|
:param string consumer_key: Consumer key.
|
|
:param string consumer_secret: Consumer secret.
|
|
:param string access_key: Access token key.
|
|
:param string access_secret: Access token secret.
|
|
"""
|
|
super(OAuthMethod, self).__init__(**kwargs)
|
|
if oauth1 is None:
|
|
raise NotImplementedError('optional package oauthlib'
|
|
' is not installed')
|
|
|
|
def get_auth_data(self, session, auth, headers, **kwargs):
|
|
# Add the oauth specific content into the headers
|
|
oauth_client = oauth1.Client(self.consumer_key,
|
|
client_secret=self.consumer_secret,
|
|
resource_owner_key=self.access_key,
|
|
resource_owner_secret=self.access_secret,
|
|
signature_method=oauth1.SIGNATURE_HMAC)
|
|
o_url, o_headers, o_body = oauth_client.sign(auth.token_url,
|
|
http_method='POST')
|
|
|
|
headers.update(o_headers)
|
|
return 'oauth1', {}
|
|
|
|
|
|
class OAuth(v3.AuthConstructor):
|
|
_auth_method_class = OAuthMethod
|