pypomes-iam 0.2.8__tar.gz → 0.3.0__tar.gz

{pypomes_iam-0.2.8 → pypomes_iam-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_iam
-Version: 0.2.8
+Version: 0.3.0
 Summary: A collection of Python pomes, penyeach (IAM modules)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-IAM
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-IAM/issues

{pypomes_iam-0.2.8 → pypomes_iam-0.3.0}/pyproject.toml

@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pypomes_iam"
-version = "0.2.8"
+version = "0.3.0"
 authors = [
   { name="GT Nunes", email="wisecoder01@gmail.com" }
 ]

{pypomes_iam-0.2.8 → pypomes_iam-0.3.0}/src/pypomes_iam/iam_pomes.py

@@ -1,3 +1,5 @@
+import json
+import requests
 from flask import Response, request, jsonify
 from logging import Logger
 from typing import Any
@@ -103,14 +105,52 @@ def service_callback() -> Response:
                                                     args=request.args,
                                                     errors=errors,
                                                     logger=logger)
+    # exchange the token
+    if request.endpoint.startswith("jusbr-"):
+        keycloak_registry: dict[str, Any] = __get_iam_registry(endpoint="keycloak-token")
+        payload: dict[str, str] = {
+            "grant_type": "urn:ietf:params:oauth:grant-type:token-exchange",
+            "subject_token": token_data[1],
+            "subject_token_type": "urn:ietf:params:oauth:token-type:access_token",
+            "client_id": keycloak_registry["client-id"],
+            "client_secret": keycloak_registry["client-secret"],
+            "requested_token_type": "urn:ietf:params:oauth:token-type:access_token",
+            "audience": token_data[0],
+            "subject_issuer": "oidc"
+        }
+        exchange_url = f"{keycloak_registry['base-url']}/protocol/openid-connect/token"
+        if logger:
+            logger.debug(msg=f"POST '{exchange_url}', data {json.dumps(obj=payload,
+                                                                       ensure_ascii=False)}")
+        headers: dict[str, str] = {
+            "Content-Type": "application/x-www-form-urlencoded"
+        }
+        response: requests.Response = requests.post(url=exchange_url,
+                                                    data=payload,
+                                                    headers=headers)
+        if response.status_code == 200:
+            # request succeeded
+            if logger:
+                logger.debug(msg=f"POST success, status {response.status_code}")
+            reply: dict[str, Any] = response.json()
+            token_data = (token_data[0], reply.get("access_token"))
+        else:
+            # request resulted in error
+            err_msg = f"POST failure, status {response.status_code}, reason '{response.reason}'"
+            if hasattr(response, "content") and response.content:
+                err_msg += f", content '{response.content}'"
+            errors.append(err_msg)
+
     result: Response
     if errors:
         result = jsonify({"errors": "; ".join(errors)})
         result.status_code = 400
+        if logger:
+            logger.error(msg=json.dumps(obj=result))
     else:
         result = jsonify({
-            "user_id": token_data[0],
-            "access_token": token_data[1]})
+            "user-id": token_data[0],
+            "access-token": token_data[1]})
 
     # log the response
     if logger: