github-actions-admin 0.0.1b4303__py3-none-any.whl

github_actions_admin/GitHubActionsAdmin.py

@@ -0,0 +1,45 @@
+from http import HTTPStatus
+
+import requests
+from python_sdk_remote.utilities import our_get_env
+
+DEFAULT_GITHUB_API_URL = "https://api.github.com"
+DEFAULT_ORGANIZATION = "circles-zone"
+GITHUB_TOKEN_ADMIN_ENVIRONMENT_VARIABLE = "GITHUB_TOKEN_ADMIN"
+REQUEST_TIMEOUT_SECONDS = 30
+
+
+class GitHubActionsAdmin:
+    def __init__(self, organization: str = DEFAULT_ORGANIZATION, token: str | None = None,
+                 api_url: str | None = None, session: requests.Session | None = None):
+        self.organization = organization
+        self.api_url = (api_url or our_get_env("GITHUB_API_URL", DEFAULT_GITHUB_API_URL)).rstrip("/")
+        self.token = token or our_get_env(GITHUB_TOKEN_ADMIN_ENVIRONMENT_VARIABLE, raise_if_empty=True)
+        self.session = session or requests.Session()
+
+    def get_github_actions_self_hosted_token(self) -> str:
+        """Registration token for a new self-hosted runner of the organization (valid for one hour)"""
+        response = self.session.post(
+            f"{self.api_url}/orgs/{self.organization}/actions/runners/registration-token",
+            headers={"Authorization": f"Bearer {self.token}", "Accept": "application/vnd.github+json"},
+            timeout=REQUEST_TIMEOUT_SECONDS)
+        response.raise_for_status()
+        return response.json()["token"]
+
+    def get_github_actions_self_hosted_token_for_developer(self, developer_github_token: str) -> str:
+        """Registration token for a developer who proves, with their own GitHub token, that they are a member of the
+        organization - so a developer's runner installer gets a token without asking the Team Lead"""
+        user_response = self.session.get(
+            f"{self.api_url}/user",
+            headers={"Authorization": f"Bearer {developer_github_token}", "Accept": "application/vnd.github+json"},
+            timeout=REQUEST_TIMEOUT_SECONDS)
+        user_response.raise_for_status()
+        login = user_response.json()["login"]
+        # NO_CONTENT = member; NOT_FOUND (or FOUND for a non-member token) = not a member
+        membership_response = self.session.get(
+            f"{self.api_url}/orgs/{self.organization}/members/{login}",
+            headers={"Authorization": f"Bearer {self.token}", "Accept": "application/vnd.github+json"},
+            timeout=REQUEST_TIMEOUT_SECONDS, allow_redirects=False)
+        if membership_response.status_code != HTTPStatus.NO_CONTENT:
+            raise PermissionError(f"GitHub user {login} is not a member of {self.organization}")
+        return self.get_github_actions_self_hosted_token()

github_actions_admin-0.0.1b4303.dist-info/METADATA

@@ -0,0 +1,10 @@
+Metadata-Version: 2.4
+Name: github-actions-admin
+Version: 0.0.1b4303
+Requires-Python: >=3.10
+Requires-Dist: requests
+Requires-Dist: python-sdk-remote>=0.0.185
+Provides-Extra: test
+Requires-Dist: pytest; extra == "test"
+Requires-Dist: pytest-cov; extra == "test"
+Dynamic: requires-python

github_actions_admin-0.0.1b4303.dist-info/RECORD

@@ -0,0 +1,5 @@
+github_actions_admin/GitHubActionsAdmin.py,sha256=qGzrGpmm6EeHkH-2hShCxPfFocCuuFBwSuJnH3g7Z6I,2556
+github_actions_admin-0.0.1b4303.dist-info/METADATA,sha256=KWlulMYH4GNjsm8fJ436q7vD7mQlLIWftQOZtXqhVdE,287
+github_actions_admin-0.0.1b4303.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+github_actions_admin-0.0.1b4303.dist-info/top_level.txt,sha256=zsoi9QFdU61nw7pc8hiyioXWsLVmSZAoBzminueknqY,21
+github_actions_admin-0.0.1b4303.dist-info/RECORD,,

github_actions_admin-0.0.1b4303.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.2.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

github_actions_admin-0.0.1b4303.dist-info/top_level.txt

@@ -0,0 +1 @@
+github_actions_admin