pbox 1.17.2

data/lib/rhc/rest/domain.rb

@@ -0,0 +1,98 @@
+module RHC
+  module Rest
+    class Domain < Base
+      include Membership
+
+      define_attr :id,                  # Domain name for API version < 1.6, domain unique id otherwise
+                  :name,                # Available from API version 1.6 onwards
+                  :allowed_gear_sizes,  # Available from API version 1.3 onwards on compatible servers
+                  :creation_time        # Available from API version 1.3 onwards on compatible servers
+
+      def id
+        id_and_name.first
+      end
+      def name
+        id_and_name.last
+      end
+      def id_and_name
+        id = @id || attributes['id']
+        name = @name || attributes['name']
+        if name.present?
+          if id == name
+            [nil, name]
+          else
+            [id, name]
+          end
+        else
+          [nil, id]
+        end
+      end
+
+      #Add Application to this domain
+      # options
+      # cartridge
+      # template
+      # scale
+      # gear_profile
+      def add_application(name, options)
+        debug "Adding application #{name} to domain #{id}"
+
+        payload = {:name => name}
+        options.each{ |key, value| payload[key.to_sym] = value }
+
+        cartridges = Array(payload.delete(:cartridge)).concat(Array(payload.delete(:cartridges))).map do |cart|
+            if cart.is_a? String or cart.respond_to? :[]
+              cart
+            else
+              cart.url ? {:url => cart.url} : cart.name
+            end
+          end.compact.uniq
+
+        if cartridges.any?{ |c| c.is_a?(Hash) and c[:url] } and !has_param?('ADD_APPLICATION', 'cartridges[][url]')
+          raise RHC::Rest::DownloadingCartridgesNotSupported, "The server does not support downloading cartridges."
+        end
+
+        if client.api_version_negotiated >= 1.3
+          payload[:cartridges] = cartridges
+        else
+          raise RHC::Rest::MultipleCartridgeCreationNotSupported, "The server only supports creating an application with a single web cartridge." if cartridges.length > 1
+          payload[:cartridge] = cartridges.first
+        end
+
+        if payload[:initial_git_url] and !has_param?('ADD_APPLICATION', 'initial_git_url')
+          raise RHC::Rest::InitialGitUrlNotSupported, "The server does not support creating applications from a source repository."
+        end
+
+        options = {:timeout => options[:scale] && 0 || nil}
+        rest_method "ADD_APPLICATION", payload, options
+      end
+
+      def applications(options = {})
+        debug "Getting all applications for domain #{id}"
+        rest_method "LIST_APPLICATIONS", options
+      end
+
+      def rename(new_id)
+        debug "Updating domain #{id} to #{new_id}"
+        # 5 minute timeout as this may take time if there are a lot of apps
+        rest_method "UPDATE", {:id => new_id}, {:timeout => 0}
+      end
+      alias :update :rename
+
+      def configure(payload, options={})
+        self.attributes = rest_method("UPDATE", payload, options).attributes
+        self
+      end
+
+      def destroy(force=false)
+        debug "Deleting domain #{id}"
+        rest_method "DELETE", :force => force
+      end
+      alias :delete :destroy
+
+      def supports_add_application_with_env_vars?
+        has_param?('ADD_APPLICATION', 'environment_variables')
+      end
+    end
+  end
+end

data/lib/rhc/rest/environment_variable.rb

@@ -0,0 +1,15 @@
+module RHC
+  module Rest
+    class EnvironmentVariable < Base
+      define_attr :name, :value
+
+      def to_hash
+        { :name => name, :value => value }
+      end
+
+      def <=>(other)
+        name <=> other.name
+      end
+    end
+  end
+end

data/lib/rhc/rest/gear_group.rb

@@ -0,0 +1,16 @@
+module RHC
+  module Rest
+    class GearGroup < Base
+      define_attr :gears, :cartridges, :gear_profile, :additional_gear_storage, :base_gear_storage
+
+      def name(gear)
+        gear['name'] ||= "#{group.cartridges.collect{ |c| c['name'] }.join('+')}:#{gear['id']}"
+      end
+
+      def quota
+        return nil unless base_gear_storage
+        ((additional_gear_storage || 0) + base_gear_storage) * 1024 * 1024 * 1024
+      end
+    end
+  end
+end

data/lib/rhc/rest/httpclient.rb

@@ -0,0 +1,145 @@
+require 'httpclient'
+
+class HTTPClient
+  class SSPINegotiateAuth
+    def get_with_rescue(*args)
+      get_without_rescue(*args)
+    rescue
+      unless @warned
+        @warned = true
+        RHC::Helpers.warn "Could not enable Kerberos authentication"
+        RHC::Helpers.warn $!.message.sub('gss_init_sec_context did not return GSS_S_COMPLETE: Unspecified GSS failure.  Minor code may provide more information', '').strip rescue nil
+      end
+      nil
+    end
+
+    alias_method :get_without_rescue, :get if method_defined? :get
+    alias_method :get, :get_with_rescue
+  end
+end
+
+module RHC
+  module Rest
+    #
+    # An instance of HTTPClient that will support deferred
+    # Basic credentials and allow token challenges.
+    #
+    class HTTPClient < ::HTTPClient
+      def initialize(*args)
+        super
+        @www_auth = WWWAuth.new
+        @request_filter = [proxy_auth, www_auth]
+      end
+    end
+
+    #
+    # Support three altered authentication behaviors
+    #
+    # * Allow a bearer token to be provided for a server
+    # * Allow the user and password attributes to be lazily
+    #   evaluated when the credentials are needed, rather than
+    #   up front.
+    # * If a BASIC auth request has been rejected, do not
+    #   retry.
+    #
+    class WWWAuth < HTTPClient::WWWAuth
+      attr_reader :oauth2
+      def initialize
+        super
+        @oauth2 = OAuth2.new
+        @authenticator.unshift(@oauth2)
+
+        deferred = DeferredBasic.new
+        @authenticator.map!{ |o| o == @basic_auth ? deferred : o }
+        @basic_auth = deferred
+      end
+
+      class OAuth2
+        include ::HTTPClient::Util
+        attr_reader :scheme
+
+        def initialize
+          @cred = nil
+          @auth = {}
+          @set = false
+          @scheme = "Bearer"
+        end
+
+        def reset_challenge
+        end
+
+        def set(uri, user, password)
+          @set = true
+          if uri.nil?
+            @cred = password
+          else
+            @auth[urify(uri)] = password
+          end
+        end
+
+        def set_token(uri, token)
+          set(uri, nil, token)
+        end
+
+        def set?
+          @set == true
+        end
+
+        def get(req)
+          target_uri = req.header.request_uri
+          return @cred if @cred
+          hash_find_value(@auth) { |uri, cred|
+            uri_part_of(target_uri, uri)
+          }
+        end
+
+        def challenge(uri, param_str = nil)
+          false
+        end
+      end
+
+      class DeferredCredential
+        def initialize(user, password)
+          @user, @password = user, password
+        end
+        def user
+          (@user.call if @user.respond_to?(:call)) or @user
+        end
+        def passwd
+          (@password.call if @password.respond_to?(:call)) or @password
+        end
+
+        #
+        # Pretend to be a string
+        #
+        def to_str
+          ["#{user}:#{passwd}"].pack('m').tr("\n", '')
+        end
+        [:sub].each do |sym| 
+          define_method(sym) { |*args|; to_str.send(sym, *args); }
+        end
+      end
+
+      class DeferredBasic < ::HTTPClient::BasicAuth
+        # Set authentication credential.
+        # uri == nil for generic purpose (allow to use user/password for any URL).
+        def set(uri, user, passwd)
+          @set = true
+          if uri.nil?
+            @cred = DeferredCredential.new(user, passwd)
+          else
+            uri = uri_dirname(urify(uri))
+            @auth[uri] = DeferredCredential.new(user, passwd)
+          end
+        end
+        def challenge(uri, param_str = nil)
+          return false if caller.any?{ |s| s =~ /webmock.*httpclient_adapter.*build_request_signature/ }
+          uri = urify(uri)
+          challenged = @challengeable[uri]
+          @challengeable[uri] = true
+          !challenged
+        end            
+      end
+    end
+  end
+end

data/lib/rhc/rest/key.rb

@@ -0,0 +1,44 @@
+module RHC
+  module Rest
+    class Key < Base
+      define_attr :name, :type, :content
+
+      def is_ssh?
+        type != 'krb5-principal'
+      end
+
+      def is_kerberos?
+        type == 'krb5-principal'
+      end
+
+      def update(type, content)
+        debug "Updating key #{self.name}"
+        rest_method "UPDATE", :type => type, :content => content
+      end
+
+      def destroy
+        debug "Deleting key #{self.name}"
+        rest_method "DELETE"
+      end
+      alias :delete :destroy
+
+      def principal
+        content if is_kerberos?
+      end
+
+      def fingerprint
+        @fingerprint ||= begin
+          public_key = Net::SSH::KeyFactory.load_data_public_key("#{type} #{content}")
+          public_key.fingerprint
+        rescue NotImplementedError, OpenSSL::PKey::PKeyError => e
+          'Invalid key'
+        end if is_ssh?
+      end
+
+      def visible_to_ssh?
+        is_ssh? and Net::SSH::Authentication::Agent.connect.identities.
+          find{ |i| fingerprint == i.fingerprint }.present? rescue false
+      end
+    end
+  end
+end

data/lib/rhc/rest/membership.rb

@@ -0,0 +1,105 @@
+module RHC::Rest
+  module Membership
+    class Member < Base
+      define_attr :name, :login, :id, :type, :from, :role, :owner, :explicit_role
+      def owner?
+        !!owner
+      end
+      def admin?
+        role == 'admin'
+      end
+      def editor?
+        role == 'edit'
+      end
+      def viewer?
+        role == 'view'
+      end
+      def name
+        attributes['name'] || login
+      end
+      def to_s
+        if name == login
+          "#{login} (#{role})"
+        elsif login
+          "#{name} <#{login}> (#{role})"
+        else
+          "#{name} (#{role})"
+        end
+      end
+      def role_weight
+        case role
+        when 'admin' then 0
+        when 'edit' then 1
+        when 'view' then 2
+        else 3
+        end
+      end
+    end
+
+    def self.included(other)
+    end
+
+    def supports_members?
+      supports? 'LIST_MEMBERS'
+    end
+
+    def supports_update_members?
+      supports? 'UPDATE_MEMBERS'
+    end
+
+    def members
+      @members ||=
+        if (members = attributes['members']).nil?
+          debug "Getting all members for #{id}"
+          raise RHC::MembersNotSupported unless supports_members?
+          rest_method 'LIST_MEMBERS'
+        else
+          members.map{ |m| Member.new(m, client) }
+        end
+    end
+
+    def compact_members
+      arr = members.reject(&:owner?) rescue []
+      if arr.length > 5
+        arr.sort_by!(&:name)
+        admin, arr = arr.partition(&:admin?)
+        edit, arr = arr.partition(&:editor?)
+        view, arr = arr.partition(&:viewer?)
+        admin << "Admins" if admin.present?
+        edit << "Editors" if edit.present?
+        view << "Viewers" if view.present?
+        arr.map!(&:to_s)
+        admin.concat(edit).concat(view).concat(arr)
+      elsif arr.present?
+        arr.sort_by{ |m| [m.role_weight, m.name] }.join(', ')
+      end
+    end
+
+    def update_members(members, options={})
+      raise "Members must be an array" unless members.is_a?(Array)
+      raise RHC::MembersNotSupported unless supports_members?
+      raise RHC::ChangeMembersOnResourceNotSupported unless supports_update_members?
+      @members = (attributes['members'] = rest_method('UPDATE_MEMBERS', {:members => members}, options))
+    end
+
+    def delete_members(options={})
+      raise RHC::MembersNotSupported unless supports_members?
+      rest_method "LIST_MEMBERS", nil, {:method => :delete}.merge(options)
+    ensure
+      @members = attributes['members'] = nil
+    end
+
+    def leave(options={})
+      raise RHC::MembersNotSupported unless supports? 'LEAVE'
+      rest_method "LEAVE", nil, options
+    ensure
+      @members = attributes['members'] = nil
+    end
+
+    def owner
+      if o = Array(attribute(:members)).find{ |m| m['owner'] == true }
+        o['name'] || o['login']
+      end
+    end
+  end
+end