From 0f26bf63c68fb30de09d0ae0c5c34c2f49d95c97 Mon Sep 17 00:00:00 2001
From: Cayo Puigdefabregas <cayo@usody.com>
Date: Wed, 20 Sep 2023 15:54:22 +0200
Subject: [PATCH] add contract oidc command

---
 ereuse_devicehub/devicehub.py                 |  16 ++-
 .../oidc/commands/add_contract_oidc.py        | 106 ++++++++++++++++++
 2 files changed, 118 insertions(+), 4 deletions(-)
 create mode 100644 ereuse_devicehub/modules/oidc/commands/add_contract_oidc.py

diff --git a/ereuse_devicehub/devicehub.py b/ereuse_devicehub/devicehub.py
index 24fee362..9d0703a3 100644
--- a/ereuse_devicehub/devicehub.py
+++ b/ereuse_devicehub/devicehub.py
@@ -55,6 +55,11 @@ try:
 except Exception:
     InsertMembe = None
 
+try:
+    from ereuse_devicehub.modules.oidc.commands.add_contract_oidc import AddContractOidc
+except Exception:
+    AddContractOidc = None
+
 
 class Devicehub(Teal):
     test_client_class = Client
@@ -110,13 +115,16 @@ class Devicehub(Teal):
         if GetMembers:
             self.get_members = GetMembers(self)
         if RegisterUserDlt:
-            self.register_user_dlt = RegisterUserDlt(self)
+            self.dlt_register_user = RegisterUserDlt(self)
         if AddMember:
-            self.register_user_dlt = AddMember(self)
+            self.dlt_insert_members = AddMember(self)
         if AddClientOidc:
-            self.register_user_dlt = AddClientOidc(self)
+            self.add_client_oidc = AddClientOidc(self)
         if InsertMember:
-            self.register_user_dlt = InsertMember(self)
+            self.dlt_insert_members = InsertMember(self)
+
+        if AddContractOidc:
+            self.add_contract_oidc = AddContractOidc(self)
 
         @self.cli.group(
             short_help='Inventory management.',
diff --git a/ereuse_devicehub/modules/oidc/commands/add_contract_oidc.py b/ereuse_devicehub/modules/oidc/commands/add_contract_oidc.py
new file mode 100644
index 00000000..6abcf6f5
--- /dev/null
+++ b/ereuse_devicehub/modules/oidc/commands/add_contract_oidc.py
@@ -0,0 +1,106 @@
+
+import click
+import logging
+import time
+
+from werkzeug.security import gen_salt
+
+from ereuse_devicehub.db import db
+from ereuse_devicehub.resources.user.models import User
+from ereuse_devicehub.modules.oidc.models import MemberFederated, OAuth2Client
+
+
+logger = logging.getLogger(__name__)
+
+
+class AddContractOidc:
+    def __init__(self, app) -> None:
+        super().__init__()
+        self.app = app
+        help = "Add client oidc"
+        self.app.cli.command('add_contract_oidc', short_help=help)(self.run)
+
+    @click.argument('email')
+    @click.argument('client_name')
+    @click.argument('client_uri')
+    @click.argument('scope', required=False, default="openid profile rols")
+    @click.argument('redirect_uris', required=False)
+    @click.argument('grant_types', required=False, default="authorization_code")
+    @click.argument('response_types', required=False, default="code")
+    @click.argument('token_endpoint_auth_method', required=False, default="client_secret_basic")
+    def run(
+            self,
+            email,
+            client_name, 
+            client_uri, 
+            scope, 
+            redirect_uris,
+            grant_types,
+            response_types, 
+            token_endpoint_auth_method):
+
+        self.email = email,
+        self.client_name = client_name, 
+        self.client_uri = client_uri, 
+        self.scope = scope, 
+        self.redirect_uris = redirect_uris,
+        self.grant_types = grant_types,
+        self.response_types = response_types, 
+        self.token_endpoint_auth_method = token_endpoint_auth_method
+
+        if not self.redirect_uris:
+            self.redirect_uris = "{}/allow_code".format(client_uri)
+
+
+        self.member = MemberFederated.query.filter_by(domain=client_uri).first()
+        self.user = User.query.filter_by(email=email).one()
+
+        if not self.member:
+            txt = "This domain is not federated."
+            logger.error(txt)
+            return
+
+        if self.member.user and self.member.user != self.user:
+            txt = "This domain is register from other user."
+            logger.error(txt)
+            return
+        if self.member.client_id and self.member.client_secret:
+            result = ", ".join([self.member.client_id, self.member.client_secret])
+            print(result)
+            return result
+
+        result = ", ".join(self.save())
+        print(result)
+        return result
+        
+
+    def save(self):
+        client_id = gen_salt(24)
+        client = OAuth2Client(client_id=client_id, user_id=self.user.id)
+        client.client_id_issued_at = int(time.time())
+
+        if self.token_endpoint_auth_method == 'none':
+            client.client_secret = ''
+        else:
+            client.client_secret = gen_salt(48)
+
+        self.member.client_id = client.client_id
+        self.member.client_secret = client.client_secret
+        self.member.user = self.user
+
+        client_metadata = {
+            "client_name": self.client_name,
+            "client_uri": self.client_uri,
+            "grant_types": self.grant_types,
+            "redirect_uris": self.redirect_uris,
+            "response_types": self.response_types,
+            "scope": self.scope,
+            "token_endpoint_auth_method": self.token_endpoint_auth_method,
+        }
+        client.set_client_metadata(client_metadata)
+        client.member_id = self.member.dlt_id_provider
+
+        db.session.add(client)
+
+        db.session.commit()
+        return client.client_id, client.client_secret