Add Passphrase Panel
Change-Id: If52f1c29877d91cce50fdfb61319bd195103e6e1
This commit is contained in:
parent
21504848d6
commit
bbcebe522f
|
@ -59,6 +59,7 @@ And enable it in Horizon::
|
|||
ln -s ../castellan-ui/castellan_ui/enabled/_93_project_key_manager_public_key_panel.py openstack_dashboard/local/enabled
|
||||
ln -s ../castellan-ui/castellan_ui/enabled/_94_project_key_manager_symmetric_key_panel.py openstack_dashboard/local/enabled
|
||||
ln -s ../castellan-ui/castellan_ui/enabled/_95_project_key_manager_opaque_data_panel.py openstack_dashboard/local/enabled
|
||||
ln -s ../castellan-ui/castellan_ui/enabled/_96_project_key_manager_passphrase_panel.py openstack_dashboard/local/enabled
|
||||
|
||||
To run horizon with the newly enabled Castellan UI plugin run::
|
||||
|
||||
|
|
|
@ -0,0 +1,61 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
|
||||
from castellan.common.objects import passphrase
|
||||
from horizon import exceptions
|
||||
from horizon import forms
|
||||
from horizon import messages
|
||||
|
||||
from castellan_ui.api import client
|
||||
from castellan_ui.content import shared_forms
|
||||
|
||||
|
||||
class ImportPassphrase(forms.SelfHandlingForm):
|
||||
name = forms.RegexField(required=False,
|
||||
max_length=255,
|
||||
label=_("Passphrase Name"),
|
||||
regex=shared_forms.NAME_REGEX,
|
||||
error_messages=shared_forms.ERROR_MESSAGES)
|
||||
direct_input = forms.CharField(
|
||||
label=_('Passphrase'),
|
||||
help_text=_('The text of the passphrase in plaintext'),
|
||||
widget=forms.widgets.Textarea(),
|
||||
required=True)
|
||||
|
||||
def handle(self, request, data):
|
||||
try:
|
||||
# Remove any new lines in the passphrase
|
||||
direct_input = data.get('direct_input')
|
||||
direct_input = shared_forms.NEW_LINES.sub("", direct_input)
|
||||
object_uuid = client.import_object(
|
||||
request,
|
||||
passphrase=direct_input,
|
||||
name=data['name'],
|
||||
object_type=passphrase.Passphrase)
|
||||
|
||||
if data['name']:
|
||||
object_identifier = data['name']
|
||||
else:
|
||||
object_identifier = object_uuid
|
||||
messages.success(request,
|
||||
_('Successfully imported passphrase: %s')
|
||||
% object_identifier)
|
||||
return object_uuid
|
||||
except Exception as e:
|
||||
msg = _('Unable to import passphrase: %s')
|
||||
messages.error(request, msg % e)
|
||||
exceptions.handle(request, ignore=True)
|
||||
self.api_error(_('Unable to import passphrase.'))
|
||||
return False
|
|
@ -0,0 +1,23 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
import horizon
|
||||
|
||||
# This panel will be loaded from horizon, because specified in enabled file.
|
||||
# To register REST api, import below here.
|
||||
from castellan_ui.api import client # noqa: F401
|
||||
|
||||
|
||||
class Passphrases(horizon.Panel):
|
||||
name = _("Passphrases")
|
||||
slug = "passphrases"
|
|
@ -0,0 +1,72 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
|
||||
from castellan_ui.content import filters
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
from django.utils.translation import ungettext_lazy
|
||||
|
||||
from castellan_ui.api import client
|
||||
from horizon import tables
|
||||
|
||||
|
||||
class ImportPassphrase(tables.LinkAction):
|
||||
name = "import_passphrase"
|
||||
verbose_name = _("Import Passphrase")
|
||||
url = "horizon:project:passphrases:import"
|
||||
classes = ("ajax-modal",)
|
||||
icon = "upload"
|
||||
policy_rules = ()
|
||||
|
||||
|
||||
class DeletePassphrase(tables.DeleteAction):
|
||||
policy_rules = ()
|
||||
help_text = _("You should not delete a passphrase unless you are "
|
||||
"certain it is not being used anywhere.")
|
||||
|
||||
@staticmethod
|
||||
def action_present(count):
|
||||
return ungettext_lazy(
|
||||
u"Delete Passphrase",
|
||||
u"Delete Passphrases",
|
||||
count
|
||||
)
|
||||
|
||||
@staticmethod
|
||||
def action_past(count):
|
||||
return ungettext_lazy(
|
||||
u"Deleted Passphrase",
|
||||
u"Deleted Passphrases",
|
||||
count
|
||||
)
|
||||
|
||||
def delete(self, request, obj_id):
|
||||
client.delete(request, obj_id)
|
||||
|
||||
|
||||
class PassphraseTable(tables.DataTable):
|
||||
detail_link = "horizon:project:passphrases:detail"
|
||||
uuid = tables.Column("id", verbose_name=_("Passphrase ID"),
|
||||
link=detail_link)
|
||||
name = tables.Column("name", verbose_name=_("Name"))
|
||||
created_date = tables.Column("created",
|
||||
verbose_name=_("Created Date"),
|
||||
filters=(filters.timestamp_to_iso,))
|
||||
|
||||
def get_object_display(self, datum):
|
||||
return datum.name if datum.name else datum.id
|
||||
|
||||
class Meta(object):
|
||||
name = "passphrase"
|
||||
table_actions = (ImportPassphrase,
|
||||
DeletePassphrase,)
|
||||
row_actions = (DeletePassphrase, )
|
|
@ -0,0 +1,22 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
from castellan_ui.content.passphrases import views
|
||||
from django.conf.urls import url
|
||||
|
||||
urlpatterns = [
|
||||
url(r'^$', views.IndexView.as_view(), name='index'),
|
||||
url(r'^import/$', views.ImportView.as_view(), name='import'),
|
||||
url(r'^(?P<object_id>[^/]+)/$',
|
||||
views.DetailView.as_view(),
|
||||
name='detail'),
|
||||
]
|
|
@ -0,0 +1,96 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
from django.core.urlresolvers import reverse
|
||||
from django.core.urlresolvers import reverse_lazy
|
||||
from django.utils.translation import ugettext_lazy as _
|
||||
|
||||
from castellan.common.objects import passphrase
|
||||
from castellan_ui.api import client
|
||||
from castellan_ui.content.passphrases import forms as passphrase_forms
|
||||
from castellan_ui.content.passphrases import tables
|
||||
from datetime import datetime
|
||||
from horizon import exceptions
|
||||
from horizon import forms
|
||||
from horizon.tables import views as tables_views
|
||||
from horizon.utils import memoized
|
||||
from horizon import views
|
||||
|
||||
|
||||
class IndexView(tables_views.MultiTableView):
|
||||
table_classes = [
|
||||
tables.PassphraseTable
|
||||
]
|
||||
template_name = 'passphrases.html'
|
||||
|
||||
def get_passphrase_data(self):
|
||||
try:
|
||||
return client.list(
|
||||
self.request, object_type=passphrase.Passphrase)
|
||||
except Exception as e:
|
||||
msg = _('Unable to list passphrases: "%s".') % (e.message)
|
||||
exceptions.handle(self.request, msg)
|
||||
return []
|
||||
|
||||
|
||||
class ImportView(forms.ModalFormView):
|
||||
form_class = passphrase_forms.ImportPassphrase
|
||||
template_name = 'passphrase_import.html'
|
||||
submit_url = reverse_lazy(
|
||||
"horizon:project:passphrases:import")
|
||||
success_url = reverse_lazy('horizon:project:passphrases:index')
|
||||
submit_label = page_title = _("Import Passphrase")
|
||||
|
||||
def get_object_id(self, key_uuid):
|
||||
return key_uuid
|
||||
|
||||
|
||||
class DetailView(views.HorizonTemplateView):
|
||||
template_name = 'passphrase_detail.html'
|
||||
page_title = _("Passphrase Details")
|
||||
|
||||
@memoized.memoized_method
|
||||
def _get_data(self):
|
||||
try:
|
||||
obj = client.get(self.request, self.kwargs['object_id'])
|
||||
except Exception:
|
||||
redirect = reverse('horizon:project:passphrases:index')
|
||||
msg = _('Unable to retrieve details for passphrase "%s".')\
|
||||
% (self.kwargs['object_id'])
|
||||
exceptions.handle(self.request, msg,
|
||||
redirect=redirect)
|
||||
return obj
|
||||
|
||||
@memoized.memoized_method
|
||||
def _get_data_created_date(self, obj):
|
||||
try:
|
||||
created_date = datetime.utcfromtimestamp(obj.created).isoformat()
|
||||
except Exception:
|
||||
redirect = reverse('horizon:project:passphrases:index')
|
||||
msg = _('Unable to retrieve details for passphrase "%s".')\
|
||||
% (self.kwargs['object_id'])
|
||||
exceptions.handle(self.request, msg,
|
||||
redirect=redirect)
|
||||
return created_date
|
||||
|
||||
@memoized.memoized_method
|
||||
def _get_data_bytes(self, obj):
|
||||
return obj.get_encoded()
|
||||
|
||||
def get_context_data(self, **kwargs):
|
||||
"""Gets the context data for key."""
|
||||
context = super(DetailView, self).get_context_data(**kwargs)
|
||||
obj = self._get_data()
|
||||
context['object'] = obj
|
||||
context['object_created_date'] = self._get_data_created_date(obj)
|
||||
context['object_bytes'] = self._get_data_bytes(obj)
|
||||
return context
|
|
@ -0,0 +1,23 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
# The slug of the panel to be added to HORIZON_CONFIG. Required.
|
||||
PANEL = 'passphrases'
|
||||
# The slug of the panel group the PANEL is associated with.
|
||||
PANEL_GROUP = 'key_manager'
|
||||
# The slug of the dashboard the PANEL associated with. Required.
|
||||
PANEL_DASHBOARD = 'project'
|
||||
|
||||
ADD_INSTALLED_APP = ['castellan_ui', ]
|
||||
|
||||
# Python panel class of the PANEL to be added.
|
||||
ADD_PANEL = 'castellan_ui.content.passphrases.panel.Passphrases'
|
|
@ -0,0 +1,7 @@
|
|||
{% extends '_object_import.html' %}
|
||||
{% load i18n %}
|
||||
|
||||
{% block modal-body-right %}
|
||||
<p>{% trans "Enter the passphrase as you would type it on on the command line or into a form." %}</p>
|
||||
{% endblock %}
|
||||
|
|
@ -0,0 +1,49 @@
|
|||
<style>
|
||||
.hidden{
|
||||
display:none;
|
||||
}
|
||||
|
||||
.visible{
|
||||
display:block;
|
||||
}
|
||||
</style>
|
||||
|
||||
<script type="text/javascript">
|
||||
function unhide(clickedButton, divID) {
|
||||
var item = document.getElementById(divID);
|
||||
if (item) {
|
||||
if(item.className=='hidden'){
|
||||
item.className = 'visible' ;
|
||||
clickedButton.textContent = 'hide'
|
||||
}else{
|
||||
item.className = 'hidden';
|
||||
clickedButton.textContent = 'show'
|
||||
}
|
||||
}}
|
||||
|
||||
</script>
|
||||
|
||||
{% extends 'base.html' %}
|
||||
{% load i18n parse_date %}
|
||||
|
||||
{% block title %}{{ page_title }}{% endblock %}
|
||||
|
||||
{% block page_header %}
|
||||
{% include "horizon/common/_detail_header.html" %}
|
||||
{% endblock %}
|
||||
|
||||
{% block main %}
|
||||
<div class="detail">
|
||||
<dl class="dl-horizontal">
|
||||
<dt>{% trans "Name" %}</dt>
|
||||
<dd>{{ object.name|default:_("None") }}</dd>
|
||||
<dt>{% trans "Created" %}</dt>
|
||||
<dd>{{ object_created_date|parse_date}}</dd>
|
||||
<dt>{% trans "Passphrase" %}</dt>
|
||||
<dd>
|
||||
<div id="passphrase" class="hidden">{{ object_bytes }}</div>
|
||||
<button class="btn" onclick="unhide(this, 'passphrase') ">show</button>
|
||||
</dd>
|
||||
</dl>
|
||||
</div>
|
||||
{% endblock %}
|
|
@ -0,0 +1,7 @@
|
|||
{% extends 'base.html' %}
|
||||
{% load i18n %}
|
||||
{% block title %}{{ page_title }}{% endblock %}
|
||||
|
||||
{% block main %}
|
||||
{% include '_passphrase_import.html' %}
|
||||
{% endblock %}
|
|
@ -0,0 +1,23 @@
|
|||
{% extends 'base.html' %}
|
||||
{% load i18n %}
|
||||
{% block title %}{% trans "Passphrases" %}{% endblock %}
|
||||
|
||||
{% block breadcrumb_nav %}
|
||||
<ol class = "breadcrumb">
|
||||
<li>{% trans "Project" %}</li>
|
||||
<li>{% trans "Key Manager" %}</li>
|
||||
<li class="active">{% trans "Passphrases" %}</li>
|
||||
</ol>
|
||||
{% endblock %}
|
||||
|
||||
{% block page_header %}
|
||||
<hz-page-header header="{% trans "Passphrases" %}"></hz-page-header>
|
||||
{% endblock page_header %}
|
||||
|
||||
{% block main %}
|
||||
<div class="row">
|
||||
<div class="col-sm-12">
|
||||
{{ passphrase_table.render }}
|
||||
</div>
|
||||
</div>
|
||||
{% endblock %}
|
|
@ -0,0 +1,112 @@
|
|||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||
# not use this file except in compliance with the License. You may obtain
|
||||
# a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
||||
# License for the specific language governing permissions and limitations
|
||||
# under the License.
|
||||
|
||||
from django.core.handlers import wsgi
|
||||
from django.core.urlresolvers import reverse
|
||||
from horizon import messages as horizon_messages
|
||||
import mock
|
||||
|
||||
from castellan.common.objects import passphrase
|
||||
from castellan_ui.api import client as api_castellan
|
||||
from castellan_ui.test import helpers as tests
|
||||
from castellan_ui.test import test_data
|
||||
|
||||
INDEX_URL = reverse('horizon:project:passphrases:index')
|
||||
|
||||
|
||||
class PassphrasesViewTest(tests.APITestCase):
|
||||
|
||||
class FakeCert(object):
|
||||
def __init__(self):
|
||||
pass
|
||||
|
||||
def setUp(self):
|
||||
super(PassphrasesViewTest, self).setUp()
|
||||
self.passphrase = test_data.passphrase
|
||||
self.mock_object(
|
||||
api_castellan, "get", mock.Mock(return_value=self.passphrase))
|
||||
self.mock_object(api_castellan, "list", mock.Mock(return_value=[]))
|
||||
self.mock_object(horizon_messages, "success")
|
||||
FAKE_ENVIRON = {'REQUEST_METHOD': 'GET', 'wsgi.input': 'fake_input'}
|
||||
self.request = wsgi.WSGIRequest(FAKE_ENVIRON)
|
||||
|
||||
def test_index(self):
|
||||
passphrase_list = [test_data.passphrase, test_data.nameless_passphrase]
|
||||
|
||||
self.mock_object(
|
||||
api_castellan, "list", mock.Mock(return_value=passphrase_list))
|
||||
|
||||
res = self.client.get(INDEX_URL)
|
||||
self.assertEqual(res.status_code, 200)
|
||||
self.assertTemplateUsed(res, 'passphrases.html')
|
||||
api_castellan.list.assert_called_with(
|
||||
mock.ANY, object_type=passphrase.Passphrase)
|
||||
|
||||
def test_detail_view(self):
|
||||
url = reverse('horizon:project:passphrases:detail',
|
||||
args=[self.passphrase.id])
|
||||
self.mock_object(
|
||||
api_castellan, "list", mock.Mock(return_value=[self.passphrase]))
|
||||
self.mock_object(
|
||||
api_castellan, "get", mock.Mock(return_value=self.passphrase))
|
||||
|
||||
res = self.client.get(url)
|
||||
self.assertContains(
|
||||
res, "<dt>Name</dt>\n <dd>%s</dd>" % self.passphrase.name,
|
||||
1, 200)
|
||||
api_castellan.get.assert_called_once_with(mock.ANY, self.passphrase.id)
|
||||
|
||||
def test_import_cert(self):
|
||||
self.mock_object(
|
||||
api_castellan, "list", mock.Mock(return_value=[self.passphrase]))
|
||||
url = reverse('horizon:project:passphrases:import')
|
||||
self.mock_object(
|
||||
api_castellan, "import_object", mock.Mock(
|
||||
return_value=self.passphrase))
|
||||
|
||||
passphrase_input = (
|
||||
self.passphrase.get_encoded()
|
||||
)
|
||||
|
||||
passphrase_form_data = {
|
||||
'source_type': 'raw',
|
||||
'name': self.passphrase.name,
|
||||
'direct_input': passphrase_input
|
||||
}
|
||||
|
||||
self.client.post(url, passphrase_form_data)
|
||||
|
||||
api_castellan.import_object.assert_called_once_with(
|
||||
mock.ANY,
|
||||
object_type=passphrase.Passphrase,
|
||||
passphrase=self.passphrase.get_encoded(),
|
||||
name=self.passphrase.name
|
||||
)
|
||||
|
||||
def test_delete_cert(self):
|
||||
self.mock_object(
|
||||
api_castellan, "list", mock.Mock(return_value=[self.passphrase]))
|
||||
self.mock_object(api_castellan, "delete")
|
||||
|
||||
passphrase_form_data = {
|
||||
'action': 'passphrase__delete__%s' % self.passphrase.id
|
||||
}
|
||||
|
||||
res = self.client.post(INDEX_URL, passphrase_form_data)
|
||||
|
||||
api_castellan.list.assert_called_with(
|
||||
mock.ANY, object_type=passphrase.Passphrase)
|
||||
api_castellan.delete.assert_called_once_with(
|
||||
mock.ANY,
|
||||
self.passphrase.id,
|
||||
)
|
||||
self.assertRedirectsNoFollow(res, INDEX_URL)
|
|
@ -84,3 +84,15 @@ nameless_opaque_data = objects.opaque_data.OpaqueData(
|
|||
name=None,
|
||||
created=1448088699,
|
||||
id=u'11111111-1111-1111-1111-111111111111')
|
||||
|
||||
passphrase = objects.passphrase.Passphrase(
|
||||
passphrase=u'P@ssw0rd',
|
||||
name=u'test passphrase',
|
||||
created=1448088699,
|
||||
id=u'00000000-0000-0000-0000-000000000000')
|
||||
|
||||
nameless_passphrase = objects.passphrase.Passphrase(
|
||||
passphrase=u'P@ssw0rd',
|
||||
name=None,
|
||||
created=1448088699,
|
||||
id=u'11111111-1111-1111-1111-111111111111')
|
||||
|
|
Loading…
Reference in New Issue