Module: Conjur::API::Router::V4

Extended by:
V4, Escape::ClassMethods
Included in:
V4
Defined in:
lib/conjur/api/router/v4.rb

Instance Method Summary collapse

Methods included from Escape::ClassMethods

fully_escape, path_escape, path_or_query_escape, query_escape

Instance Method Details

#authn_authenticate(account, username) ⇒ Object 



20
21
22
23
24
25
26
 
# File 'lib/conjur/api/router/v4.rb', line 20

def authn_authenticate , username
  ()
  RestClient::Resource.new(
    Conjur.configuration.authn_url,
    Conjur.configuration.rest_client_options
  )['users'][fully_escape username]['authenticate']
end

#authn_authenticate_local(username, account, expiration, cidr, &block) ⇒ Object

For v4, the authn-local message is the username.



29
30
31
32
33
34
35
36
 
# File 'lib/conjur/api/router/v4.rb', line 29

def authn_authenticate_local username, , expiration, cidr, &block
  ()

  raise "'expiration' is not supported for authn-local v4" if expiration
  raise "'cidr' is not supported for authn-local v4" if cidr

  username
end

#authn_login(account, username, password) ⇒ Object 



9
10
11
12
13
14
15
16
17
18
 
# File 'lib/conjur/api/router/v4.rb', line 9

def  , username, password
  ()
  RestClient::Resource.new(
    Conjur.configuration.authn_url,
    Conjur.configuration.create_rest_client_options(
      user: username,
      password: password
    )
  )['users/login']
end

#authn_rotate_api_key(credentials, account, id) ⇒ Object 



38
39
40
41
42
43
44
45
 
# File 'lib/conjur/api/router/v4.rb', line 38

def authn_rotate_api_key credentials, , id
  ()
  username = id.kind == "user" ? id.identifier : [id.kind, id.identifier].join('/')
  RestClient::Resource.new(
    Conjur.configuration.authn_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['users']["api_key?id=#{username}"]
end

#authn_rotate_own_api_key(account, username, password) ⇒ Object 



47
48
49
50
51
52
53
 
# File 'lib/conjur/api/router/v4.rb', line 47

def authn_rotate_own_api_key , username, password
  ()
  RestClient::Resource.new(
    Conjur.configuration.authn_url,
    Conjur.configuration.create_rest_client_options(user: username, password: password)
  )['users']["api_key"]
end

#group_attributes(credentials, resource, id) ⇒ Object 



146
147
148
149
150
151
152
153
154
 
# File 'lib/conjur/api/router/v4.rb', line 146

def group_attributes credentials, resource, id
  (id.)
  JSON.parse(
    RestClient::Resource.new(
      Conjur.configuration.core_url,
      Conjur.configuration.create_rest_client_options(credentials)
    )['groups'][fully_escape id.identifier].get
  )
end

#host_factory_create_host(token) ⇒ Object 



55
56
57
58
59
60
61
62
63
 
# File 'lib/conjur/api/router/v4.rb', line 55

def host_factory_create_host token
  http_options = {
    headers: { authorization: %Q(Token token="#{token}") }
  }
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(http_options)
  )['host_factories']['hosts']
end

#host_factory_create_tokens(credentials, id) ⇒ Object 



65
66
67
68
69
70
 
# File 'lib/conjur/api/router/v4.rb', line 65

def host_factory_create_tokens credentials, id
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['host_factories'][id.identifier]['tokens']
end

#host_factory_revoke_token(credentials, token) ⇒ Object 



72
73
74
75
76
77
 
# File 'lib/conjur/api/router/v4.rb', line 72

def host_factory_revoke_token credentials, token
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['host_factories']['tokens'][token]
end

#parse_group_gidnumber(attributes) ⇒ Object 



176
177
178
 
# File 'lib/conjur/api/router/v4.rb', line 176

def parse_group_gidnumber attributes
  attributes['gidnumber']
end

#parse_members(credentials, result) ⇒ Object 



192
193
194
195
196
 
# File 'lib/conjur/api/router/v4.rb', line 192

def parse_members credentials, result
  result.collect do |json|
    RoleGrant.parse_from_json(json, credentials)
  end
end

#parse_user_uidnumber(attributes) ⇒ Object 



180
181
182
 
# File 'lib/conjur/api/router/v4.rb', line 180

def parse_user_uidnumber attributes
  attributes['uidnumber']
end

#parse_variable_kind(attributes) ⇒ Object 



184
185
186
 
# File 'lib/conjur/api/router/v4.rb', line 184

def parse_variable_kind attributes
  attributes['kind']
end

#parse_variable_mime_type(attributes) ⇒ Object 



188
189
190
 
# File 'lib/conjur/api/router/v4.rb', line 188

def parse_variable_mime_type attributes
  attributes['mime_type']
end

#resources_check(credentials, id, privilege, role) ⇒ Object 



87
88
89
90
91
92
93
94
95
96
97
 
# File 'lib/conjur/api/router/v4.rb', line 87

def resources_check credentials, id, privilege, role
  options = {}
  options[:check] = true
  options[:privilege] = privilege
  if role
    options[:resource_id] = id
    roles_role(credentials, Id.new(role))[options_querystring options].get
  else
    resources_resource(credentials, id)[options_querystring options].get
  end
end

#resources_permitted_roles(credentials, id, privilege) ⇒ Object 



99
100
101
102
103
104
 
# File 'lib/conjur/api/router/v4.rb', line 99

def resources_permitted_roles credentials, id, privilege
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['authz'][id.]['roles']['allowed_to'][privilege][id.kind][id.identifier]
end

#resources_resource(credentials, id) ⇒ Object 



79
80
81
82
83
84
85
 
# File 'lib/conjur/api/router/v4.rb', line 79

def resources_resource credentials, id

  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['authz'][id.]['resources'][id.kind][id.identifier]
end

#roles_role(credentials, id) ⇒ Object 



106
107
108
109
110
111
 
# File 'lib/conjur/api/router/v4.rb', line 106

def roles_role credentials, id
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['authz'][id.]['roles'][id.kind][id.identifier]
end

#secrets_add(credentials, id) ⇒ Object 



113
114
115
116
117
118
119
 
# File 'lib/conjur/api/router/v4.rb', line 113

def secrets_add credentials, id
  (id.)
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['variables'][fully_escape id.identifier]['values']
end

#secrets_value(credentials, id, options) ⇒ Object 



129
130
131
132
133
134
 
# File 'lib/conjur/api/router/v4.rb', line 129

def secrets_value credentials, id, options
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['variables'][fully_escape id.identifier]['value'][options_querystring options]
end

#secrets_values(credentials, variable_ids) ⇒ Object 



136
137
138
139
140
141
142
143
144
 
# File 'lib/conjur/api/router/v4.rb', line 136

def secrets_values credentials, variable_ids
  options = {
    vars: Array(variable_ids).map { |v| fully_escape(v.identifier) }.join(',')
  }
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['variables']['values'][options_querystring options]
end

#user_attributes(credentials, resource, id) ⇒ Object 



166
167
168
169
170
171
172
173
174
 
# File 'lib/conjur/api/router/v4.rb', line 166

def user_attributes credentials, resource, id
  (id.)
  JSON.parse(
    RestClient::Resource.new(
      Conjur.configuration.core_url,
      Conjur.configuration.create_rest_client_options(credentials)
    )['users'][fully_escape id.identifier].get
  )
end

#variable(credentials, id) ⇒ Object 



121
122
123
124
125
126
127
 
# File 'lib/conjur/api/router/v4.rb', line 121

def variable credentials, id
  (id.)
  RestClient::Resource.new(
    Conjur.configuration.core_url,
    Conjur.configuration.create_rest_client_options(credentials)
  )['variables'][fully_escape id.identifier]
end

#variable_attributes(credentials, resource, id) ⇒ Object 



156
157
158
159
160
161
162
163
164
 
# File 'lib/conjur/api/router/v4.rb', line 156

def variable_attributes credentials, resource, id
  (id.)
  JSON.parse(
    RestClient::Resource.new(
      Conjur.configuration.core_url,
      Conjur.configuration.create_rest_client_options(credentials)
    )['variables'][fully_escape id.identifier].get
  )
end