suite-py 1.52.0__py3-none-any.whl → 1.53.1__py3-none-any.whl

suite_py/__version__.py

@@ -1,2 +1,2 @@
 # -*- encoding: utf-8 -*-
-__version__ = "1.52.0"
+__version__ = "1.53.1"

suite_py/commands/ask_review.py

@@ -10,11 +10,11 @@ from suite_py.lib.handler.youtrack_handler import YoutrackHandler
 
 
 class AskReview:
-    def __init__(self, project, captainhook, config, tokens):
+    def __init__(self, project, backstage, config, tokens):
         self._project = project
         self._config = config
         self._youtrack = YoutrackHandler(config, tokens)
-        self._captainhook = captainhook
+        self._backstage = backstage
         self._git = GitHandler(project, config)
         self._github = GithubHandler(tokens)
         self._frequent_reviewers = FrequentReviewersHandler(config)
@@ -32,13 +32,11 @@ class AskReview:
 
     def _maybe_get_users_list(self):
         try:
-            users = self._captainhook.get_users_list().json()
+            users = self._backstage.get_users_list()
             self._config.put_cache("users", users)
             return users
         except Exception:
-            logger.warning(
-                "Can't get users list from Captainhook. Using cached version."
-            )
+            logger.warning("Can't get users list from Backstage. Using cached version.")
             return self._config.get_cache("users")
 
     def _get_pr(self):

suite_py/lib/handler/backstage_handler.py

@@ -1,12 +1,15 @@
 # -*- encoding: utf-8 -*-
-import requests
+import ssl
+from urllib.parse import urlparse
 
+import requests
 from suite_py.__version__ import __version__
 from suite_py.lib.handler.github_handler import GithubHandler
 from suite_py.lib.handler.okta_handler import Okta
+from suite_py.lib import logger
 
 
-class BackstageResponseError(Exception): ...
+class BackstageError(Exception): ...
 
 
 class Backstage:
@@ -14,18 +17,24 @@ class Backstage:
     _github: GithubHandler
 
     def __init__(self, config, okta: Okta, tokens=None):
-        backstage_url = config.user["backstage_url"]
-        self._baseurl = f"{backstage_url}/api/entity-locking"
+        self._backstage_url = config.user["backstage_url"]
         self._timeout = config.user["backstage_timeout"]
+        self._backstage_identity_token = None
+
+        # Under mise cacert are loaded from ~/.local/share/mise
+        # so we need to force system defaults to make warp happy
+        self._verify = ssl.get_default_verify_paths().capath
         self._okta = okta
 
         if tokens is not None:
             self._github = GithubHandler(tokens)
 
     def lock_project(self, project, env):
-        return self.send_request(
-            "post",
-            "/projects/manage-lock",
+        return self._request(
+            method="post",
+            url=self._entity_locking_endpoint("/projects/manage-lock"),
+            headers=self._okta_headers(),
+            raise_for_status=True,
             json={
                 "project": project,
                 "status": "locked",
@@ -35,9 +44,11 @@ class Backstage:
         )
 
     def unlock_project(self, project, env):
-        return self.send_request(
-            "post",
-            "/projects/manage-lock",
+        return self._request(
+            method="post",
+            url=self._entity_locking_endpoint("/projects/manage-lock"),
+            headers=self._okta_headers(),
+            raise_for_status=True,
             json={
                 "project": project,
                 "status": "unlocked",
@@ -47,36 +58,110 @@ class Backstage:
         )
 
     def status(self, project, env):
-        return self.send_request(
-            "get", f"/projects/check?project={project}&environment={env}"
+        return self._request(
+            method="get",
+            url=self._entity_locking_endpoint(
+                f"/projects/check?project={project}&environment={env}"
+            ),
+            raise_for_status=True,
         )
 
     def check(self):
-        response = self.send_request("get", "/ping", timeout=(2, self._timeout))
+        response = self._request(
+            method="get",
+            url=self._entity_locking_endpoint("/ping"),
+            headers=self._okta_headers(),
+            timeout=(2, self._timeout),
+            raise_for_status=True,
+        )
+
         assert response.text == "pong"
 
-    def send_request(self, method, endpoint, data=None, json=None, timeout=None):
+    def get_users_list(self):
+        response = self._fetch_users()
+
+        if response.status_code == 401:
+            self._refresh_backstage_identity_token()
+            response = self._fetch_users()
+
+        response.raise_for_status()
+
+        return [
+            {"name": u.pop("displayName"), **u}
+            for u in (item["spec"]["profile"] for item in response.json()["items"])
+            if "github" in u and "youtrack" in u and "displayName" in u
+        ]
+
+    def _request(self, method, url, **kwargs):
+        timeout = kwargs.pop("timeout", self._timeout)
+        verify = kwargs.pop("verify", self._verify)
+        allow_redirects = kwargs.pop("allow_redirects", False)
+        raise_for_status = kwargs.pop("raise_for_status", False)
+
         response = requests.request(
-            method,
-            f"{self._baseurl}{endpoint}",
-            headers=self._headers(),
-            data=data,
-            json=json,
-            timeout=(timeout or self._timeout),
+            method=method,
+            url=url,
+            timeout=timeout,
+            verify=verify,
+            allow_redirects=allow_redirects,
+            **kwargs,
         )
 
-        if response.status_code == 200:
-            return response
-
-        raise BackstageResponseError(
-            f"Got unexpected status code from Backstage: {response.status_code}"
+        redirect = (
+            urlparse(response.headers["Location"])
+            if response.status_code == 302
+            else None
         )
 
+        if redirect is not None and redirect.netloc == "prima.cloudflareaccess.com":
+            logger.error(
+                "It looks like Cloudflare WARP is not active, please enable it and try again"
+            )
+
+            raise BackstageError("Cloudflare Access authentication redirect")
+
+        if raise_for_status:
+            response.raise_for_status()
+
+        return response
+
+    def _entity_locking_endpoint(self, path):
+        return f"{self._backstage_url}/api/entity-locking{path}"
+
     def _get_user(self):
         return self._github.get_user().login
 
-    def _headers(self):
+    def _okta_headers(self):
         return {
             "User-Agent": f"suite-py/{__version__}",
             "Authorization": f"Bearer {self._okta.get_id_token()}",
         }
+
+    def _backstage_headers(self):
+        if self._backstage_identity_token is None:
+            self._refresh_backstage_identity_token()
+
+        return {
+            "User-Agent": f"suite-py/{__version__}",
+            "Authorization": f"Bearer {self._backstage_identity_token}",
+        }
+
+    def _fetch_users(self):
+        fields = ",".join(
+            f"spec.profile.{f}" for f in ("displayName", "youtrack", "slack", "github")
+        )
+
+        return self._request(
+            method="GET",
+            url=f"{self._backstage_url}/api/catalog/entities/by-query?filter=kind=user&fields={fields}&limit=500",
+            headers=self._backstage_headers(),
+        )
+
+    def _refresh_backstage_identity_token(self):
+        response = self._request(
+            method="GET",
+            url=f"{self._backstage_url}/api/auth/cfaccess/refresh",
+            raise_for_status=True,
+        )
+
+        self._backstage_identity_token = response.json()["backstageIdentity"]["token"]

{suite_py-1.52.0.dist-info → suite_py-1.53.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: suite-py
-Version: 1.52.0
+Version: 1.53.1
 Summary: 
 Author: larrywax, EugenioLaghi, michelangelomo
 Author-email: devops@prima.it

{suite_py-1.52.0.dist-info → suite_py-1.53.1.dist-info}/RECORD

@@ -1,8 +1,8 @@
 suite_py/__init__.py,sha256=REmi3D0X2G1ZWnYpKs8Ffm3NIj-Hw6dMuvz2b9NW344,142
-suite_py/__version__.py,sha256=aH4waNa4t_y13ssQMfeCqJjhsWfkkKeGmRRt8xfdQBo,49
+suite_py/__version__.py,sha256=tWS55oa7CuidwTRjYZN1XICIW3isHmGkbR_Suy337-E,49
 suite_py/cli.py,sha256=FP9p8j3RDxcAd6vYJObysC7I3CsIwmRH2wf3sw4krQQ,12778
 suite_py/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-suite_py/commands/ask_review.py,sha256=yN__Ac-fiZBPShjRDhyCCQZGfVlQE16KozoJk4UtiNw,3788
+suite_py/commands/ask_review.py,sha256=YptUKyac2eckhemv0FtQlJFoTAxS0IXAYkgokmKoxg8,3741
 suite_py/commands/bump.py,sha256=oFZU1hPfD11ujFC5G7wFyQOf2alY3xp2SO1h1ldjf3s,5406
 suite_py/commands/check.py,sha256=bRAiuGbafQV33dCZQQSNZ1zBYsecIX3E19iAQKbY86I,3684
 suite_py/commands/common.py,sha256=aWCEvO3hqdheuMUmZcHuc9EGZPQTk7VkzkHJk283MxQ,566
@@ -20,7 +20,7 @@ suite_py/lib/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/lib/config.py,sha256=YwimlbFJZh-K9Xrnmmw84SWy-GdfkFWSfnGl_wW5sII,4185
 suite_py/lib/handler/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 suite_py/lib/handler/aws_handler.py,sha256=dRvRDicikfRbuFtCLPbevaX-yC-fO4LwXFdyqLPJ8OI,8815
-suite_py/lib/handler/backstage_handler.py,sha256=CGeuhlmNMUNka0-1nIxNDYw_teoey9ScWYArKzT-1J8,2370
+suite_py/lib/handler/backstage_handler.py,sha256=pSdwrXOyIxrnKtowXc_Shhjpoh_x0ij3a6zWvYzO3lM,5231
 suite_py/lib/handler/captainhook_handler.py,sha256=R30_Vvh2ck7fM5fwbpm3UV_FtlQr2xnx6RJpkG1Gn14,2983
 suite_py/lib/handler/changelog_handler.py,sha256=-ppnRl3smBA_ys8tPqXmytS4eyntlwfawC2fiXFcwlw,4818
 suite_py/lib/handler/frequent_reviewers_handler.py,sha256=EIJX5FEMWzrxuXS9A17hu1vfxgJSOHSBX_ahCEZ2FVA,2185
@@ -41,7 +41,7 @@ suite_py/lib/requests/session.py,sha256=P32H3cWnCWunu91WIj2iDM5U3HzaBglg60VN_C9J
 suite_py/lib/symbol.py,sha256=z3QYBuNIwD3qQ3zF-cLOomIr_-C3bO_u5UIDAHMiyTo,60
 suite_py/lib/tokens.py,sha256=4DbsHDFLIxs40t3mRw_ZyhmejZQ0Bht7iAL8dTCTQd4,5458
 suite_py/templates/login.html,sha256=fJLls2SB84oZTSrxTdA5q1PqfvIHcCD4fhVWfyco7Ig,861
-suite_py-1.52.0.dist-info/METADATA,sha256=I-0R3K5j-1kejZ9jgu1n3bw_uM31h6sjP0HehU6IzSs,1188
-suite_py-1.52.0.dist-info/WHEEL,sha256=FMvqSimYX_P7y0a7UY-_Mc83r5zkBZsCYPm7Lr0Bsq4,88
-suite_py-1.52.0.dist-info/entry_points.txt,sha256=dVKLC-9Infy-dHJT_MkK6LcDjOgBCJ8lfPkURJhBjxE,46
-suite_py-1.52.0.dist-info/RECORD,,
+suite_py-1.53.1.dist-info/METADATA,sha256=H8UmZJOHe_ERsn4A8LDR9cXbTkyqnfEEbWkojGFZ974,1188
+suite_py-1.53.1.dist-info/WHEEL,sha256=FMvqSimYX_P7y0a7UY-_Mc83r5zkBZsCYPm7Lr0Bsq4,88
+suite_py-1.53.1.dist-info/entry_points.txt,sha256=dVKLC-9Infy-dHJT_MkK6LcDjOgBCJ8lfPkURJhBjxE,46
+suite_py-1.53.1.dist-info/RECORD,,