# Copyright 2013 OpenStack Foundation # All Rights Reserved. # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. from oslo_serialization import jsonutils as json from six.moves.urllib import parse as urllib from tempest.common import service_client class IdentityV3Client(service_client.ServiceClient): api_version = "v3" def show_api_description(self): """Retrieves info about the v3 Identity API""" url = '' resp, body = self.get(url) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def create_user(self, user_name, password=None, project_id=None, email=None, domain_id='default', **kwargs): """Creates a user.""" en = kwargs.get('enabled', True) description = kwargs.get('description', None) default_project_id = kwargs.get('default_project_id') post_body = { 'project_id': project_id, 'default_project_id': default_project_id, 'description': description, 'domain_id': domain_id, 'email': email, 'enabled': en, 'name': user_name, 'password': password } post_body = json.dumps({'user': post_body}) resp, body = self.post('users', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_user(self, user_id, name, **kwargs): """Updates a user.""" body = self.show_user(user_id)['user'] email = kwargs.get('email', body['email']) en = kwargs.get('enabled', body['enabled']) project_id = kwargs.get('project_id', body['project_id']) if 'default_project_id' in body.keys(): default_project_id = kwargs.get('default_project_id', body['default_project_id']) else: default_project_id = kwargs.get('default_project_id') description = kwargs.get('description', body['description']) domain_id = kwargs.get('domain_id', body['domain_id']) post_body = { 'name': name, 'email': email, 'enabled': en, 'project_id': project_id, 'default_project_id': default_project_id, 'id': user_id, 'domain_id': domain_id, 'description': description } post_body = json.dumps({'user': post_body}) resp, body = self.patch('users/%s' % user_id, post_body) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_user_password(self, user_id, password, original_password): """Updates a user password.""" update_user = { 'password': password, 'original_password': original_password } update_user = json.dumps({'user': update_user}) resp, _ = self.post('users/%s/password' % user_id, update_user) self.expected_success(204, resp.status) return service_client.ResponseBody(resp) def list_user_projects(self, user_id): """Lists the projects on which a user has roles assigned.""" resp, body = self.get('users/%s/projects' % user_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_users(self, params=None): """Get the list of users.""" url = 'users' if params: url += '?%s' % urllib.urlencode(params) resp, body = self.get(url) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def show_user(self, user_id): """GET a user.""" resp, body = self.get("users/%s" % user_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_user(self, user_id): """Deletes a User.""" resp, body = self.delete("users/%s" % user_id) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def create_project(self, name, **kwargs): """Creates a project.""" description = kwargs.get('description', None) en = kwargs.get('enabled', True) domain_id = kwargs.get('domain_id', 'default') post_body = { 'description': description, 'domain_id': domain_id, 'enabled': en, 'name': name } post_body = json.dumps({'project': post_body}) resp, body = self.post('projects', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_projects(self, params=None): url = "projects" if params: url += '?%s' % urllib.urlencode(params) resp, body = self.get(url) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_project(self, project_id, **kwargs): body = self.get_project(project_id)['project'] name = kwargs.get('name', body['name']) desc = kwargs.get('description', body['description']) en = kwargs.get('enabled', body['enabled']) domain_id = kwargs.get('domain_id', body['domain_id']) post_body = { 'id': project_id, 'name': name, 'description': desc, 'enabled': en, 'domain_id': domain_id, } post_body = json.dumps({'project': post_body}) resp, body = self.patch('projects/%s' % project_id, post_body) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_project(self, project_id): """GET a Project.""" resp, body = self.get("projects/%s" % project_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_project(self, project_id): """Delete a project.""" resp, body = self.delete('projects/%s' % str(project_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def create_role(self, name): """Create a Role.""" post_body = { 'name': name } post_body = json.dumps({'role': post_body}) resp, body = self.post('roles', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def show_role(self, role_id): """GET a Role.""" resp, body = self.get('roles/%s' % str(role_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_roles(self): """Get the list of Roles.""" resp, body = self.get("roles") self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_role(self, name, role_id): """Create a Role.""" post_body = { 'name': name } post_body = json.dumps({'role': post_body}) resp, body = self.patch('roles/%s' % str(role_id), post_body) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_role(self, role_id): """Delete a role.""" resp, body = self.delete('roles/%s' % str(role_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def assign_user_role(self, project_id, user_id, role_id): """Add roles to a user on a project.""" resp, body = self.put('projects/%s/users/%s/roles/%s' % (project_id, user_id, role_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def create_domain(self, name, **kwargs): """Creates a domain.""" description = kwargs.get('description', None) en = kwargs.get('enabled', True) post_body = { 'description': description, 'enabled': en, 'name': name } post_body = json.dumps({'domain': post_body}) resp, body = self.post('domains', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_domain(self, domain_id): """Delete a domain.""" resp, body = self.delete('domains/%s' % str(domain_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def list_domains(self, params=None): """List Domains.""" url = 'domains' if params: url += '?%s' % urllib.urlencode(params) resp, body = self.get(url) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_domain(self, domain_id, **kwargs): """Updates a domain.""" body = self.get_domain(domain_id)['domain'] description = kwargs.get('description', body['description']) en = kwargs.get('enabled', body['enabled']) name = kwargs.get('name', body['name']) post_body = { 'description': description, 'enabled': en, 'name': name } post_body = json.dumps({'domain': post_body}) resp, body = self.patch('domains/%s' % domain_id, post_body) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_domain(self, domain_id): """Get Domain details.""" resp, body = self.get('domains/%s' % domain_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def show_token(self, resp_token): """Get token details.""" headers = {'X-Subject-Token': resp_token} resp, body = self.get("auth/tokens", headers=headers) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_token(self, resp_token): """Deletes token.""" headers = {'X-Subject-Token': resp_token} resp, body = self.delete("auth/tokens", headers=headers) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def create_group(self, name, **kwargs): """Creates a group.""" description = kwargs.get('description', None) domain_id = kwargs.get('domain_id', 'default') project_id = kwargs.get('project_id', None) post_body = { 'description': description, 'domain_id': domain_id, 'project_id': project_id, 'name': name } post_body = json.dumps({'group': post_body}) resp, body = self.post('groups', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_group(self, group_id): """Get group details.""" resp, body = self.get('groups/%s' % group_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_groups(self): """Lists the groups.""" resp, body = self.get('groups') self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def update_group(self, group_id, **kwargs): """Updates a group.""" body = self.get_group(group_id)['group'] name = kwargs.get('name', body['name']) description = kwargs.get('description', body['description']) post_body = { 'name': name, 'description': description } post_body = json.dumps({'group': post_body}) resp, body = self.patch('groups/%s' % group_id, post_body) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_group(self, group_id): """Delete a group.""" resp, body = self.delete('groups/%s' % str(group_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def add_group_user(self, group_id, user_id): """Add user into group.""" resp, body = self.put('groups/%s/users/%s' % (group_id, user_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def list_group_users(self, group_id): """List users in group.""" resp, body = self.get('groups/%s/users' % group_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_user_groups(self, user_id): """Lists groups which a user belongs to.""" resp, body = self.get('users/%s/groups' % user_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_group_user(self, group_id, user_id): """Delete user in group.""" resp, body = self.delete('groups/%s/users/%s' % (group_id, user_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def assign_user_role_on_project(self, project_id, user_id, role_id): """Add roles to a user on a project.""" resp, body = self.put('projects/%s/users/%s/roles/%s' % (project_id, user_id, role_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def assign_user_role_on_domain(self, domain_id, user_id, role_id): """Add roles to a user on a domain.""" resp, body = self.put('domains/%s/users/%s/roles/%s' % (domain_id, user_id, role_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def list_user_roles_on_project(self, project_id, user_id): """list roles of a user on a project.""" resp, body = self.get('projects/%s/users/%s/roles' % (project_id, user_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_user_roles_on_domain(self, domain_id, user_id): """list roles of a user on a domain.""" resp, body = self.get('domains/%s/users/%s/roles' % (domain_id, user_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_role_from_user_on_project(self, project_id, user_id, role_id): """Delete role of a user on a project.""" resp, body = self.delete('projects/%s/users/%s/roles/%s' % (project_id, user_id, role_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def delete_role_from_user_on_domain(self, domain_id, user_id, role_id): """Delete role of a user on a domain.""" resp, body = self.delete('domains/%s/users/%s/roles/%s' % (domain_id, user_id, role_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def assign_group_role_on_project(self, project_id, group_id, role_id): """Add roles to a user on a project.""" resp, body = self.put('projects/%s/groups/%s/roles/%s' % (project_id, group_id, role_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def assign_group_role_on_domain(self, domain_id, group_id, role_id): """Add roles to a user on a domain.""" resp, body = self.put('domains/%s/groups/%s/roles/%s' % (domain_id, group_id, role_id), None) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def list_group_roles_on_project(self, project_id, group_id): """list roles of a user on a project.""" resp, body = self.get('projects/%s/groups/%s/roles' % (project_id, group_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def list_group_roles_on_domain(self, domain_id, group_id): """list roles of a user on a domain.""" resp, body = self.get('domains/%s/groups/%s/roles' % (domain_id, group_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_role_from_group_on_project(self, project_id, group_id, role_id): """Delete role of a user on a project.""" resp, body = self.delete('projects/%s/groups/%s/roles/%s' % (project_id, group_id, role_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def delete_role_from_group_on_domain(self, domain_id, group_id, role_id): """Delete role of a user on a domain.""" resp, body = self.delete('domains/%s/groups/%s/roles/%s' % (domain_id, group_id, role_id)) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def create_trust(self, trustor_user_id, trustee_user_id, project_id, role_names, impersonation, expires_at): """Creates a trust.""" roles = [{'name': n} for n in role_names] post_body = { 'trustor_user_id': trustor_user_id, 'trustee_user_id': trustee_user_id, 'project_id': project_id, 'impersonation': impersonation, 'roles': roles, 'expires_at': expires_at } post_body = json.dumps({'trust': post_body}) resp, body = self.post('OS-TRUST/trusts', post_body) self.expected_success(201, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def delete_trust(self, trust_id): """Deletes a trust.""" resp, body = self.delete("OS-TRUST/trusts/%s" % trust_id) self.expected_success(204, resp.status) return service_client.ResponseBody(resp, body) def get_trusts(self, trustor_user_id=None, trustee_user_id=None): """GET trusts.""" if trustor_user_id: resp, body = self.get("OS-TRUST/trusts?trustor_user_id=%s" % trustor_user_id) elif trustee_user_id: resp, body = self.get("OS-TRUST/trusts?trustee_user_id=%s" % trustee_user_id) else: resp, body = self.get("OS-TRUST/trusts") self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_trust(self, trust_id): """GET trust.""" resp, body = self.get("OS-TRUST/trusts/%s" % trust_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_trust_roles(self, trust_id): """GET roles delegated by a trust.""" resp, body = self.get("OS-TRUST/trusts/%s/roles" % trust_id) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def get_trust_role(self, trust_id, role_id): """GET role delegated by a trust.""" resp, body = self.get("OS-TRUST/trusts/%s/roles/%s" % (trust_id, role_id)) self.expected_success(200, resp.status) body = json.loads(body) return service_client.ResponseBody(resp, body) def check_trust_role(self, trust_id, role_id): """HEAD Check if role is delegated by a trust.""" resp, body = self.head("OS-TRUST/trusts/%s/roles/%s" % (trust_id, role_id)) self.expected_success(200, resp.status) return service_client.ResponseBody(resp, body)