screwdriver-api 8.0.57 → 8.0.59

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "screwdriver-api",
-  "version": "8.0.57",
+  "version": "8.0.59",
   "description": "API server for the Screwdriver.cd service",
   "main": "index.js",
   "scripts": {
@@ -121,7 +121,7 @@
     "screwdriver-executor-queue": "^6.0.0",
     "screwdriver-executor-router": "^5.0.0",
     "screwdriver-logger": "^3.0.0",
-    "screwdriver-models": "^32.4.0",
+    "screwdriver-models": "^32.8.0",
     "screwdriver-notifications-email": "^5.0.0",
     "screwdriver-notifications-slack": "^7.0.0",
     "screwdriver-request": "^3.0.0",

package/plugins/pipelines/admins/get.js

@@ -5,6 +5,7 @@ const joi = require('joi');
 const schema = require('screwdriver-data-schema');
 const getSchema = schema.models.pipeline.base.extract('admins').get;
 const idSchema = schema.models.pipeline.base.extract('id');
+const scmContextSchema = schema.models.pipeline.base.extract('scmContext');
 
 module.exports = () => ({
     method: 'GET',
@@ -15,19 +16,39 @@ module.exports = () => ({
         tags: ['api', 'pipelines'],
         auth: {
             strategies: ['token'],
-            scope: ['user', 'pipeline', '!guest']
+            scope: ['user', 'admin', 'pipeline', '!guest']
         },
 
         handler: async (request, h) => {
-            const factory = request.server.app.pipelineFactory;
-            const pipeline = await factory.get(request.params.id);
+            const pipelineFactory = request.server.app.pipelineFactory;
+            const { scope } = request.auth.credentials;
+            const { scmContext, includeUserToken } = request.query;
+
+            if (includeUserToken && !scope.includes('admin')) {
+                throw boom.forbidden('Only Screwdriver admin is allowed to request user token');
+            }
+
+            const pipeline = await pipelineFactory.get(request.params.id);
 
             if (!pipeline) {
                 throw boom.notFound('Pipeline does not exist');
             }
 
             try {
-                const admin = await pipeline.getFirstAdmin();
+                const admin =
+                    scmContext && scmContext !== pipeline.scmContext
+                        ? await pipeline.getFirstAdmin({ scmContext })
+                        : await pipeline.getFirstAdmin();
+
+                if (includeUserToken) {
+                    const profile = request.server.plugins.auth.generateProfile({
+                        username: admin.username,
+                        scmContext: admin.scmContext,
+                        scope: ['user']
+                    });
+
+                    admin.userToken = request.server.plugins.auth.generateToken(profile);
+                }
 
                 return h.response(admin);
             } catch (e) {
@@ -40,6 +61,10 @@ module.exports = () => ({
         validate: {
             params: joi.object({
                 id: idSchema
+            }),
+            query: joi.object({
+                scmContext: scmContextSchema.optional(),
+                includeUserToken: joi.boolean().optional()
             })
         }
     }