pybritive 2.2.3__tar.gz → 2.3.0__tar.gz

{pybritive-2.2.3/src/pybritive.egg-info → pybritive-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pybritive
-Version: 2.2.3
+Version: 2.3.0
 Summary: A pure Python CLI for Britive
 Author-email: "Britive Inc." <support@britive.com>
 License: MIT License

pybritive-2.3.0/src/pybritive/__init__.py

@@ -0,0 +1 @@
+__version__ = '2.3.0'

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/britive_cli.py

@@ -314,9 +314,9 @@ class BritiveCli:
             output += f' (alias: {alias})'
         self.print(output, ignore_silent=True)
 
-    def list_secrets(self):
+    def list_secrets(self, search_text: Optional[str] = None):
         self.login()
-        self.print(self.b.my_secrets.list(), ignore_silent=True)
+        self.print(self.b.my_secrets.list(search=search_text), ignore_silent=True)
 
     def list_approvals(self):
         self.login()
@@ -338,14 +338,34 @@ class BritiveCli:
         approvals.reverse()
         self.print(approvals, ignore_silent=True)
 
-    def list_resources(self):
+    def list_requests(self):
+        self.login()
+        requests = []
+        for request in self.b.my_requests.list():
+            request.pop('resource', None)
+            request.pop('consumer', None)
+            request.pop('timeToApprove', None)
+            request.pop('validFor', None)
+            request.pop('action', None)
+            request.pop('approvers', None)
+            request.pop('expirationTimeApproval', None)
+            request.pop('updatedAt', None)
+            request.pop('actionBy', None)
+            request.pop('validForInDays', None)
+            requests.append(request)
+
+        requests = sorted(requests, key=lambda x: x['createdAt'])
+        requests.reverse()
+        self.print(requests, ignore_silent=True)
+
+    def list_resources(self, search_text: Optional[str] = None):
         self.login()
         found_resource_names = []
         resources = []
-        if resource_limit := int(self.config.my_resources_retrieval_limit):
-            profiles = self.b.my_resources.list(size=resource_limit)['data']
-        else:
-            profiles = self.b.my_resources.list_profiles()
+        resource_limit = int(self.config.my_resources_retrieval_limit)
+        profiles = self.b.my_resources.list(search_text=search_text, size=resource_limit)
+        if resource_limit:
+            profiles = profiles['data']
         for item in profiles:
             name = item['resourceName']
             if name not in found_resource_names:
@@ -360,9 +380,14 @@ class BritiveCli:
                 found_resource_names.append(name)
         self.print(resources, ignore_silent=True)
 
-    def list_profiles(self, checked_out: bool = False, profile_type: Optional[str] = None):
+    def list_profiles(
+        self,
+        checked_out: bool = False,
+        profile_type: Optional[str] = None,
+        search_text: Optional[str] = None,
+    ):
         self.login()
-        self._set_available_profiles(profile_type=profile_type)
+        self._set_available_profiles(profile_type=profile_type, search_text=search_text)
         data = []
         checked_out_profiles = {}
         if checked_out:  # only make this call if we have to
@@ -390,7 +415,7 @@ class BritiveCli:
                     'Application': profile['app_name'] or 'Resources',
                     'Environment': profile['env_name'],
                     'Profile': profile['profile_name'],
-                    'Description': profile['profile_description'] or 'Resource',
+                    'Description': profile['profile_description'] if profile['app_name'] else 'Resource',
                     'Type': profile['app_type'],
                 }
 
@@ -427,9 +452,9 @@ class BritiveCli:
         if self.output_format == 'list-profiles':
             self.output_format = 'list'
 
-    def list_applications(self):
+    def list_applications(self, search_text: Optional[str] = None):
         self.login()
-        self._set_available_profiles()
+        self._set_available_profiles(profile_type='my-access', search_text=search_text)
         keys = ['app_name', 'app_type', 'app_description']
         apps = []
         for profile in self.available_profiles:
@@ -440,14 +465,14 @@ class BritiveCli:
             row = {
                 'Application': app['app_name'],
                 'Type': app['app_type'],
-                'Description': app['app_description'],
+                'Description': app['app_description'] or '',
             }
             data.append(row)
         self.print(data, ignore_silent=True)
 
-    def list_environments(self):
+    def list_environments(self, search_text: Optional[str] = None):
         self.login()
-        self._set_available_profiles()
+        self._set_available_profiles(profile_type='my-access', search_text=search_text)
         envs = []
         keys = ['app_name', 'app_type', 'env_name', 'env_description']
         for profile in self.available_profiles:
@@ -459,37 +484,27 @@ class BritiveCli:
             row = {
                 'Application': env['app_name'],
                 'Environment': env['env_name'],
-                'Description': env['env_description'],
+                'Description': env['env_description'] or '',
                 'Type': env['app_type'],
             }
             data.append(row)
         self.print(data, ignore_silent=True)
 
-    # temporary fix till the new API is updated to return `sessionAttributes`
-    def _get_missing_session_attributes(self, app_id: str, profile_id: str) -> dict:
-        if not self.listed_profiles:
-            self.listed_profiles = self.b.my_access.list_profiles()
-        return next(
-            (
-                profile['sessionAttributes']
-                for app in self.listed_profiles
-                if app['appContainerId'] == app_id
-                for profile in app.get('profiles', [])
-                if profile['profileId'] == profile_id
-            ),
-            [],
-        )
-
-    def _set_available_profiles(self, from_cache_command=False, profile_type: Optional[str] = None):
+    def _set_available_profiles(
+        self,
+        from_cache_command=False,
+        profile_type: Optional[str] = None,
+        search_text: Optional[str] = None,
+    ):
         if not self.available_profiles:
             data = []
             if not profile_type or profile_type == 'my-access':
                 self.listed_profiles = None
                 access_limit = int(self.config.my_access_retrieval_limit)
                 increase = 0
-                while (access_data := self.b.my_access.list(size=access_limit + increase))['count'] > len(
-                    access_data['accesses']
-                ) and len({a['papId'] for a in access_data['accesses']}) < access_limit:
+                while (access_data := self.b.my_access.list(search_text=search_text, size=access_limit + increase))[
+                    'count'
+                ] > len(access_data['accesses']) and len({a['papId'] for a in access_data['accesses']}) < access_limit:
                     increase += max(25, round(access_data['count'] * 0.25))
                 apps = {a['appContainerId']: a for a in access_data.get('apps', [])}
                 envs = {e['environmentId']: e for e in access_data.get('environments', [])}
@@ -518,18 +533,15 @@ class BritiveCli:
                         'profile_description': profile['papDescription'],
                         'profile_id': profile_id,
                         'profile_name': profile['papName'],
-                        'session_attributes': profile.get(
-                            'sessionAttributes', self._get_missing_session_attributes(app_id, profile_id)
-                        ),
+                        'session_attributes': profile['sessionAttributes'],
                     }
                     if row not in access_output:
                         access_output.append(row)
                 data += access_output[:access_limit] if access_limit else access_output
             if self.b.feature_flags.get('server-access') and (not profile_type or profile_type == 'my-resources'):
-                if not (resource_limit := int(self.config.my_resources_retrieval_limit)):
-                    profiles = self.b.my_resources.list_profiles()
-                else:
-                    profiles = self.b.my_resources.list(size=resource_limit)
+                resource_limit = int(self.config.my_resources_retrieval_limit)
+                profiles = self.b.my_resources.list(search_text=search_text, size=resource_limit)
+                if resource_limit:
                     profiles = profiles['data']
                 for item in profiles:
                     row = {

pybritive-2.3.0/src/pybritive/commands/ls.py

@@ -0,0 +1,79 @@
+import click
+
+from pybritive.helpers.build_britive import build_britive
+from pybritive.options.britive_options import britive_options
+
+
+@click.group()
+def ls():
+    """List resources available for currently authenticated identity."""
+    pass
+
+
+@ls.command()
+@build_britive
+@britive_options(names='search_text,format,tenant,token,silent,passphrase,federation_provider')
+def applications(ctx, search_text, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List applications for the currently authenticated identity."""
+    ctx.obj.britive.list_applications(search_text=search_text)
+
+
+@ls.command()
+@build_britive
+@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
+def approvals(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List approvals for the currently authenticated identity."""
+    ctx.obj.britive.list_approvals()
+
+
+@ls.command()
+@build_britive
+@britive_options(names='search_text,format,tenant,token,silent,passphrase,federation_provider')
+def environments(ctx, search_text, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List environments for the currently authenticated identity."""
+    ctx.obj.britive.list_environments(search_text=search_text)
+
+
+@ls.command()
+@build_britive
+@britive_options(
+    names='checked_out,profile_type,search_text,output_format,tenant,token,silent,passphrase,federation_provider'
+)
+def profiles(
+    ctx,
+    checked_out,
+    profile_type,
+    search_text,
+    output_format,
+    tenant,
+    token,
+    silent,
+    passphrase,
+    federation_provider,
+):
+    """List profiles for the currently authenticated identity."""
+    ctx.obj.britive.list_profiles(checked_out=checked_out, profile_type=profile_type, search_text=search_text)
+
+
+@ls.command()
+@build_britive
+@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
+def requests(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List requests for the currently authenticated identity."""
+    ctx.obj.britive.list_requests()
+
+
+@ls.command()
+@build_britive
+@britive_options(names='search_text,format,tenant,token,silent,passphrase,federation_provider')
+def resources(ctx, search_text, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List resources for the currently authenticated identity."""
+    ctx.obj.britive.list_resources(search_text=search_text)
+
+
+@ls.command()
+@build_britive
+@britive_options(names='search_text,format,tenant,token,silent,passphrase,federation_provider')
+def secrets(ctx, search_text, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List secrets for the currently authenticated identity."""
+    ctx.obj.britive.list_secrets(search_text=search_text)

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/helpers/aws_credential_process.py

@@ -128,7 +128,7 @@ def get_args():
     args = {
         'tenant': None,
         'token': None,
-        'passphrase': None,
+        'passphrase': os.getenv('PYBRITIVE_ENCRYPTED_CREDENTIAL_PASSPHRASE'),
         'force_renew': None,
         'profile': None,
         'federation_provider': None,

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/helpers/credentials.py

@@ -5,6 +5,7 @@ import json
 import os
 import random
 import time
+import uuid
 import webbrowser
 from pathlib import Path
 from typing import Optional
@@ -345,10 +346,15 @@ class EncryptedFileCredentialManager(CredentialManager):
         try:
             return self.string_encryptor.decrypt(ciphertext=encrypted_access_token)
         except InvalidPassphraseException:
-            self.cli.print('invalid passphrase provided - wiping credentials and forcing a re-authentication.')
-            self.delete()
-            self.credentials = self.load() or {}
-            return self.get_token()
+            try:
+                self.passphrase = str(uuid.getnode())
+                self.string_encryptor = StringEncryption(passphrase=self.passphrase)
+                return self.string_encryptor.decrypt(ciphertext=encrypted_access_token)
+            except InvalidPassphraseException:
+                self.cli.print('invalid passphrase provided - wiping credentials and forcing a re-authentication.')
+                self.delete()
+                self.credentials = self.load() or {}
+                return self.get_token()
 
     def encrypt(self, decrypted_access_token: str):
         return self.string_encryptor.encrypt(plaintext=decrypted_access_token)

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/helpers/encryption.py

@@ -1,6 +1,8 @@
 import base64
+import hashlib
 import os
-import uuid
+import platform
+from getpass import getuser
 from typing import Optional
 
 from cryptography.fernet import Fernet, InvalidToken
@@ -15,7 +17,12 @@ class InvalidPassphraseException(Exception):
 
 class StringEncryption:
     def __init__(self, passphrase: Optional[str] = None):
-        self.passphrase = passphrase or str(uuid.getnode())  # TODO change?
+        self.passphrase = (
+            passphrase
+            or hashlib.sha256(
+                '|'.join([getuser(), *platform.uname()._asdict().values()]).replace(' ', '').encode('utf-8')
+            ).hexdigest()
+        )
 
     @staticmethod
     def _salt():

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/helpers/k8s_exec.py

@@ -1,3 +1,4 @@
+import os
 from sys import argv, exit
 
 
@@ -8,7 +9,12 @@ def get_args():
         argv[1:], 't:T:p:F:hv', ['tenant=', 'token=', 'passphrase=', 'federation-provider=', 'help', 'version']
     )[0]
 
-    args = {'tenant': None, 'token': None, 'passphrase': None, 'federation_provider': None}
+    args = {
+        'tenant': None,
+        'token': None,
+        'passphrase': os.getenv('PYBRITIVE_ENCRYPTED_CREDENTIAL_PASSPHRASE'),
+        'federation_provider': None,
+    }
 
     for opt, arg in options:
         if opt in ('-t', '--tenant'):

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive/options/britive_options.py

@@ -25,6 +25,7 @@ from pybritive.options.output_format import option as output_format
 from pybritive.options.passphrase import option as passphrase
 from pybritive.options.profile_type import option as profile_type
 from pybritive.options.query import option as query
+from pybritive.options.search_text import option as search_text
 from pybritive.options.silent import option as silent
 from pybritive.options.ssh_hostname import option as ssh_hostname
 from pybritive.options.ssh_key_source import option as ssh_key_source
@@ -39,44 +40,45 @@ from pybritive.options.verbose import option as verbose
 from pybritive.options.version import option as version
 
 options_map = {
-    'tenant': tenant,
-    'token': token,
-    'format': output_format,
-    'output_format': output_format,
     'alias': alias,
+    'aws_console_duration': aws_console_duration,
+    'aws_credentials_file': aws_credentials_file,
+    'aws_profile': aws_profile,
     'blocktime': blocktime,
-    'mode': mode,
-    'maxpolltime': maxpolltime,
-    'version': version,
-    'configure_tenant': configure_tenant,
+    'browser': browser,
+    'checked_out': checked_out,
     'configure_alias': configure_alias,
+    'configure_backend': configure_backend,
     'configure_prompt': configure_prompt,
-    'justification': justification,
-    'ticket_type': ticket_type,
-    'ticket_id': ticket_id,
-    'otp': otp,
-    'silent': silent,
+    'configure_tenant': configure_tenant,
     'console': console,
-    'checked_out': checked_out,
+    'extend': extend,
+    'federation_provider': federation_provider,
     'file': file,
-    'configure_backend': configure_backend,
-    'passphrase': passphrase,
     'force_renew': force_renew,
-    'aws_credentials_file': aws_credentials_file,
-    'federation_provider': federation_provider,
+    'format': output_format,
     'gcloud_key_file': gcloud_key_file,
-    'verbose': verbose,
+    'justification': justification,
+    'maxpolltime': maxpolltime,
+    'mode': mode,
+    'otp': otp,
+    'output_format': output_format,
+    'passphrase': passphrase,
+    'profile_type': profile_type,
     'query': query,
+    'search_text': search_text,
+    'silent': silent,
     'ssh_hostname': ssh_hostname,
-    'ssh_username': ssh_username,
-    'ssh_push_public_key': ssh_push_public_key,
-    'ssh_port': ssh_port,
     'ssh_key_source': ssh_key_source,
-    'aws_profile': aws_profile,
-    'aws_console_duration': aws_console_duration,
-    'browser': browser,
-    'extend': extend,
-    'profile_type': profile_type,
+    'ssh_port': ssh_port,
+    'ssh_push_public_key': ssh_push_public_key,
+    'ssh_username': ssh_username,
+    'tenant': tenant,
+    'ticket_id': ticket_id,
+    'ticket_type': ticket_type,
+    'token': token,
+    'verbose': verbose,
+    'version': version,
 }
 
 

pybritive-2.3.0/src/pybritive/options/search_text.py

@@ -0,0 +1,8 @@
+import click
+
+option = click.option(
+    '--search-text',
+    '-S',
+    help='Filter list results to items matching the supplied search text.',
+    default=None,
+)

{pybritive-2.2.3 → pybritive-2.3.0/src/pybritive.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pybritive
-Version: 2.2.3
+Version: 2.3.0
 Summary: A pure Python CLI for Britive
 Author-email: "Britive Inc." <support@britive.com>
 License: MIT License

{pybritive-2.2.3 → pybritive-2.3.0}/src/pybritive.egg-info/SOURCES.txt

@@ -80,6 +80,7 @@ src/pybritive/options/output_format.py
 src/pybritive/options/passphrase.py
 src/pybritive/options/profile_type.py
 src/pybritive/options/query.py
+src/pybritive/options/search_text.py
 src/pybritive/options/silent.py
 src/pybritive/options/ssh_hostname.py
 src/pybritive/options/ssh_key_source.py

pybritive-2.2.3/src/pybritive/__init__.py

@@ -1 +0,0 @@
-__version__ = '2.2.3'

pybritive-2.2.3/src/pybritive/commands/ls.py

@@ -1,58 +0,0 @@
-import click
-
-from pybritive.helpers.build_britive import build_britive
-from pybritive.options.britive_options import britive_options
-
-
-@click.group()
-def ls():
-    """List resources available for currently authenticated identity."""
-    pass
-
-
-@ls.command()
-@build_britive
-@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
-def applications(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List applications for the currently authenticated identity."""
-    ctx.obj.britive.list_applications()
-
-
-@ls.command()
-@build_britive
-@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
-def environments(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List environments for the currently authenticated identity."""
-    ctx.obj.britive.list_environments()
-
-
-@ls.command()
-@build_britive
-@britive_options(names='checked_out,profile_type,output_format,tenant,token,silent,passphrase,federation_provider')
-def profiles(ctx, checked_out, profile_type, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List profiles for the currently authenticated identity."""
-    ctx.obj.britive.list_profiles(checked_out=checked_out, profile_type=profile_type)
-
-
-@ls.command()
-@build_britive
-@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
-def secrets(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List secrets for the currently authenticated identity."""
-    ctx.obj.britive.list_secrets()
-
-
-@ls.command()
-@build_britive
-@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
-def approvals(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List approvals for the currently authenticated identity."""
-    ctx.obj.britive.list_approvals()
-
-
-@ls.command()
-@build_britive
-@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
-def resources(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
-    """List resources for the currently authenticated identity."""
-    ctx.obj.britive.list_resources()