sp-seutils 0.0.1 → 0.0.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fbad290d1c8944202370f5dc03228c9952a3c664bd61b8f061e6e0121cc75ea6
-  data.tar.gz: a81cb77c92d5bb2009e5c5d40053a61b5aed034b72eaa2d4ae8e58def4f64be6
+  metadata.gz: bbd1054feedb226b7502926e6451f215ec2f62accfd8be745175b0cf92be5e06
+  data.tar.gz: 43066d0e2dd362b67283d6556ec3efd2e37eba0554746e87bd06595efd4864a9
 SHA512:
-  metadata.gz: f79bcd35c7dc7ffe8bbc3e5a95094d6407aa8530c273a4dca360ed9bddbe714510495168dd569019dc5ab29860e5c3f69623249e35c3bb317de4c9197c455e71
-  data.tar.gz: 4b53eca404537d0ffb8c34bd294b6b1fada511f5f45869703b4026bc0da03e24afb0021e824531f1f63cdc81a0e6795c337c6d5102e68da3b2782fbcdf911451
+  metadata.gz: 781cdac94ae2401a189bf21cd63089facad7f038f1be198abcd761341ccc978a20c009148ea423350b8492d062085a9ed2bb5a0fca5ffa984908325aab7e338f
+  data.tar.gz: 490ee6136a6f58d2b5092bff2baa967957328613198c726647d4595b76614066244bfbc9fcf8b64014a27b08a2a4f3f51e361a2914aca342da69925b3c8095f3

data/lib/sp-seutils.rb

@@ -126,6 +126,38 @@ class SeUtils
     return rest_result
   end
 
+  #-----------------------------------------------------------------------------#
+  # run specified API method ... for v3 etc
+  # api must include the entire string if http args are used
+  # body is either json or a hash
+  # 
+  def self.api_do(org,api,body,api_method,client_id,client_secret,user,pass,token=nil)
+    return nil unless ["patch","put","post","delete"].include? api_method.to_s
+    body = JSON.generate(body) if body.is_a? Hash
+    base_url = org.split(".identitynow.com").first+".api.identitynow.com"
+    url = URI.join(base_url, api).to_s
+    token = token || idn_oauth_3(org,client_id,client_secret,user,pass) 
+    content_type = 'application/json'
+    content_type = 'application/json-patch+json' if api_method.to_s == "patch"
+    rest_result = nil
+    redirected_url = nil
+    response = RestClient::Request.new({
+      method: api_method.to_sym,
+      url: url,
+      payload: body,
+      timeout: nil,
+      headers: {'Authorization' => "Bearer #{token}", 
+                    "Accept"=>"*/*" ,
+                    'Content-Type' => content_type,
+                    'cache-control' => 'no-cache'
+                    }
+       }).execute do |response, request, result, &block|
+      rest_result = handle_rest_response(response, request, result, &block)
+    end
+    return rest_result
+  end
+
+
 
   #-----------------------------------------------------------------------------#
   # Get a list of apps
@@ -188,7 +220,6 @@ class SeUtils
     i = 0
     loop do
       url = URI.join(org, api).to_s+arg.to_s+"?limit=250&offset="+i.to_s
-      # puts "executing API GET #{url}"
       token = token || idn_oauth(org,user,password,client_id,client_secret)
       page = nil
       RestClient.get(url, {'Authorization' => "Bearer #{token}", 'X-CSRF-Token' => 'nocheck' }  ) do |response, request, result, &block|
@@ -206,7 +237,7 @@ class SeUtils
   # returns JSON
   #
   def self.api_accessprofile_list(org,user,password,client_id,client_secret,token=nil)
-    api = URI.escape("api/v2/access-profiles")
+    api = "api/v2/access-profiles"
     rest_result = []
     i = 0
     loop do
@@ -228,7 +259,7 @@ class SeUtils
   # returns JSON
   #
   def self.api_accessprofile_get(org,user,password,client_id,client_secret,id,token=nil)
-    api = URI.escape("api/v2/access-profiles/#{id}")
+    api = "api/v2/access-profiles/"+id.to_s
     url = URI.join(org, api).to_s
     token = token || idn_oauth(org,user,password,client_id,client_secret)
     rest_result = nil
@@ -243,7 +274,7 @@ class SeUtils
   # returns JSON
   #
   def self.api_workgroups_get(org,user,password,client_id,client_secret,id=nil,token=nil)
-    api = URI.escape("api/v2/workgroups/#{id}") # hopefully no more than 250 governance groups
+    api = "api/v2/workgroups/"+id.to_s # hopefully no more than 250 governance groups
     url = URI.join(org, api).to_s
     token = token || idn_oauth(org,user,password,client_id,client_secret)
     rest_result = nil
@@ -413,7 +444,7 @@ class SeUtils
       source_json[k] = "true" if v.is_a? TrueClass
       source_json[k] = "false" if v.is_a? FalseClass
     end
-    source_json["connectorAttributes"]["cloudExternalId"] = source_json["connectorAttributes"]["cloudExternalId"].to_s
+    # source_json["connectorAttributes"]["cloudExternalId"] = source_json["connectorAttributes"]["cloudExternalId"].to_s
 
     # shouldn't be updating these things... we'll keep the ones from the GET
     ["type","connector","connectorClass","created", "modified"].each{|i| args.delete i}
@@ -490,31 +521,52 @@ class SeUtils
   #-----------------------------------------------------------------------------#
   # Get accounts from a source
   # 
-  def self.api_source_getaccounts(org,user,password,client_id,client_secret,source_id,token=nil)
-    api = "api/source/getAccounts"
-
-    body = JSON.generate({:id=>source_id})
-    url = cc_url(URI.join(org, api).to_s)
-    token = token || idn_oauth(org,user,password,client_id,client_secret) 
-
-    rest_result = nil
-    redirected_url = nil
-    response = RestClient::Request.new({
-      method: :get,
-      url: url,
-      payload: body,
-      timeout: nil,
-      headers: {'Authorization' => "Bearer #{token}", 
-                    "Accept"=>"*/*" ,
-                    'Cache-Control' => 'no-cache',
-                    'Content-Type' => 'application/json',
-                    'cache-control' => 'no-cache'
-                    }
-       }).execute do |response, request, result, &block|
-      rest_result = handle_rest_response(response, request, result, &block)
-    end
-    return rest_result
-  end
+  def self.api_source_getaccounts(org,client_id,client_secret,source_id,token=nil)
+  api = "api/source/getAccounts"
+
+  args = "?id=#{source_id}"
+  url = cc_url(URI.join(org, api+args).to_s)
+  # puts "executing API GET #{url}"
+  token = token || idn_oauth_2(org,client_id,client_secret)
+
+  rest_result = nil
+  redirected_url = nil
+  response = RestClient::Request.new({
+    method: :get,
+    url: url,
+    timeout: nil,
+    headers: {'Authorization' => "Bearer #{token}", 
+                  "Accept"=>"*/*" ,
+                  'cache-control' => 'no-cache'
+                  }
+     }).execute do |response, request, result, &block|
+    rest_result = handle_rest_response(response, request, result, &block)
+  end
+  return rest_result
+end
+  #   api = "api/source/getAccounts"
+
+  #   body = JSON.generate({:id=>source_id})
+  #   url = cc_url(URI.join(org, api).to_s)
+  #   token = token || idn_oauth(org,user,password,client_id,client_secret) 
+
+  #   rest_result = nil
+  #   redirected_url = nil
+  #   response = RestClient::Request.new({
+  #     method: :get,
+  #     url: url,
+  #     payload: body,
+  #     timeout: nil,
+  #     headers: {'Authorization' => "Bearer #{token}", 
+  #                   "Accept"=>"*/*" ,
+  #                   'Content-Type' => 'application/json',
+  #                   'cache-control' => 'no-cache'
+  #                   }
+  #      }).execute do |response, request, result, &block|
+  #     rest_result = handle_rest_response(response, request, result, &block)
+  #   end
+  #   return rest_result
+  # end
 
   #-----------------------------------------------------------------------------#
   # Get accounts CSV file
@@ -536,7 +588,6 @@ class SeUtils
       i += page.length
       page.each do |u|
         users[u["name"].split(" ").join(".")] = u["externalId"] unless u.nil?
-        @idn_users << u unless u.nil?
         nil_users+=1 if u.nil?
       end
       break if page.length != 250
@@ -571,7 +622,6 @@ class SeUtils
             timeout: nil,
             headers: {'Authorization' => "Bearer #{token}", 
                           "Accept"=>"*/*" ,
-                          'Cache-Control' => 'no-cache',
                           'Content-Type' => 'application/json',
                           'cache-control' => 'no-cache'
                           }
@@ -660,7 +710,6 @@ class SeUtils
       timeout: nil,
       headers: {'Authorization' => "Bearer #{token}", 
                     "Accept"=>"*/*" ,
-                    'Cache-Control' => 'no-cache',
                     'Content-Type' => 'application/json',
                     'cache-control' => 'no-cache'
                     }
@@ -1406,10 +1455,11 @@ class SeUtils
   #
   def self.api_source_reset(org,user,password,client_id,client_secret,id,query,token=nil)
     api = "api/source/reset/"
-    url = cc_url(URI.join(org, api, id, query).to_s).to_s
+    url = cc_url(URI.join(org, api).to_s).to_s+"?id=#{id}"
     token = token || idn_oauth(org,user,password,client_id,client_secret)
     redirected_url = nil
     rest_result = nil
+    wait_for_identity_refresh(org,user,password,client_id,client_secret,token)
     RestClient.post(url, nil,
                          {'Authorization' => "Bearer #{token}",'X-CSRF-Token' => 'nocheck' }) do |response, request, result, &block|
       rest_result = handle_rest_response(response,request,result,&block)
@@ -1449,7 +1499,6 @@ class SeUtils
       timeout: nil,
       headers: {'Authorization' => "Bearer #{token}", 
                     "Accept"=>"*/*" ,
-                    'Cache-Control' => 'no-cache',
                     'Content-Type' => 'application/json',
                     'cache-control' => 'no-cache'
                     }
@@ -1598,8 +1647,8 @@ class SeUtils
     return result
   end
 
-  def self.source_name_id_extid(org, user, pass, api_user, api_key)
-    sources_list = JSON.parse(api_get(org, "source/list", user, pass, api_user, api_key, @token))
+  def self.source_name_id_extid(org,user,pass,client_id,client_secret,token)
+    sources_list = JSON.parse(api_get(org,"source/list",user,pass,client_id,client_secret,token))
     name_id_extid = {}
     sources_list.each do |i|
       next if i["name"] == "IdN Admins" # skip this source, which is flat file and unique to each IdN org
@@ -1611,7 +1660,7 @@ class SeUtils
     return name_id_extid
   end
 
-  def self.entitlement_id_transform(org, user, pass, api_user, api_key)
+  def self.entitlement_id_transform(org,user,pass,client_id,client_secret,token)
     entitlement_maps = {}
     source_dir_contents = Dir.entries(@sources_dir)[2..-1]
     sources = {}
@@ -1638,7 +1687,7 @@ class SeUtils
         all_entitlement_map[ent["id"]][:name] = ent["displayableName"] if ent["displayName"].nil? # could be a bug?
       end
     end
-    sources_list = JSON.parse(api_get(org, "source/list", user, pass, api_user, api_key, @token))
+    sources_list = JSON.parse(api_get(org,"source/list",user,pass,client_id,client_secret,token))
     ext_ids = {}
     sources_list.each do |i|
       next if i["name"] == "IdN Admins" # skip this source, which is flat file and unique to each IdN org
@@ -1651,7 +1700,7 @@ class SeUtils
     ext_ids.each do |id, ext_id|
       threads << Thread.new do
         app_entitlements = []
-        result = api_get(org, "entitlement/list/?CISApplicationId=#{ext_id}", user, pass, api_user, api_key, @token)
+        result = api_get(org, "entitlement/list/?CISApplicationId=#{ext_id}",user,pass,client_id,client_secret,token)
         entitlement_bundle = JSON.parse(result)["items"]
         entitlement_bundle.each do |ent|
           entitlement = {}
@@ -2007,7 +2056,7 @@ class SeUtils
 
     new_args.chop!
 
-    args = URI.escape(new_args)
+    args = URI.encode_www_form_component(new_args)
 
     api = "api/campaign/create"
     url = URI.join(org, api, args).to_s
@@ -2289,7 +2338,7 @@ class SeUtils
       args = args+k.to_s+"="+v.to_s+"&"
     end
     args.chop!
-    return URI.escape(args)
+    return URI.encode_www_form_component(args)
   end
 
   def self.unescape(s)
@@ -2322,7 +2371,7 @@ class SeUtils
   def self.rest_value_array(a)
     return a if (a == []) || (a.nil?)
     s = ["["]
-    a.each{ |i| s << i+','}
+    a.each{ |i| s << i.to_s+','}
     s.last.chop!
     s << "]"
     a = s.join

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sp-seutils
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.7
 platform: ruby
 authors:
 - Josh Karnes
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2020-12-10 00:00:00.000000000 Z
+date: 2021-01-08 00:00:00.000000000 Z
 dependencies: []
 description: Utilities SailPoint SEs can use to help perform demo system tasks.
 email: josh.karnes@sailpoint.com
@@ -21,7 +21,7 @@ homepage: https://rubygems.org/gems/sp-seutils
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -36,8 +36,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
-signing_key: 
+rubygems_version: 3.2.4
+signing_key:
 specification_version: 4
 summary: SailPoint SE Utilities
 test_files: []