edad0dbfc4
User Credentials panel is added to Identity dashboard. Credentials table has Create, Update and Delete credential actions. Credentials tab is added to the user details for Identity -> Users table. Credentials panel is added to user settings. Change-Id: Icaabed327604d39b0bf6ac3e3cacf9c62f9e5d5d
116 lines
4.5 KiB
Python
116 lines
4.5 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from django.utils.translation import gettext_lazy as _
|
|
|
|
from horizon import exceptions
|
|
from horizon import forms
|
|
from horizon import messages
|
|
|
|
from openstack_dashboard.api import keystone
|
|
|
|
# Available credential type choices
|
|
TYPE_CHOICES = (
|
|
('totp', _('TOTP')),
|
|
('ec2', _('EC2')),
|
|
('cert', _('cert')),
|
|
)
|
|
|
|
|
|
class CreateCredentialForm(forms.SelfHandlingForm):
|
|
user_name = forms.ThemableChoiceField(label=_('User'))
|
|
cred_type = forms.ThemableChoiceField(label=_('Type'),
|
|
choices=TYPE_CHOICES)
|
|
data = forms.CharField(label=_('Data'))
|
|
project = forms.ThemableChoiceField(label=_('Project'), required=False)
|
|
failure_url = 'horizon:identity:credentials:index'
|
|
|
|
def __init__(self, request, *args, **kwargs):
|
|
super().__init__(request, *args, **kwargs)
|
|
|
|
users = keystone.user_list(request)
|
|
user_choices = [(user.id, user.name) for user in users]
|
|
self.fields['user_name'].choices = user_choices
|
|
|
|
project_choices = [('', _("Select a project"))]
|
|
projects, __ = keystone.tenant_list(request)
|
|
for project in projects:
|
|
if project.enabled:
|
|
project_choices.append((project.id, project.name))
|
|
self.fields['project'].choices = project_choices
|
|
|
|
def handle(self, request, data):
|
|
try:
|
|
params = {
|
|
'user': data['user_name'],
|
|
'type': data["cred_type"],
|
|
'blob': data["data"],
|
|
}
|
|
if data["project"]:
|
|
params['project'] = data['project']
|
|
new_credential = keystone.credential_create(request, **params)
|
|
messages.success(
|
|
request, _("User credential created successfully."))
|
|
return new_credential
|
|
except Exception:
|
|
exceptions.handle(request, _('Unable to create user credential.'))
|
|
|
|
|
|
class UpdateCredentialForm(forms.SelfHandlingForm):
|
|
id = forms.CharField(label=_("ID"), widget=forms.HiddenInput)
|
|
user_name = forms.ThemableChoiceField(label=_('User'))
|
|
cred_type = forms.ThemableChoiceField(label=_('Type'),
|
|
choices=TYPE_CHOICES)
|
|
data = forms.CharField(label=_("Data"))
|
|
project = forms.ThemableChoiceField(label=_('Project'), required=False)
|
|
failure_url = 'horizon:identity:credentials:index'
|
|
|
|
def __init__(self, request, *args, **kwargs):
|
|
super().__init__(request, *args, **kwargs)
|
|
|
|
users = keystone.user_list(request)
|
|
user_choices = [(user.id, user.name) for user in users]
|
|
self.fields['user_name'].choices = user_choices
|
|
|
|
initial = kwargs.get('initial', {})
|
|
cred_type = initial.get('cred_type')
|
|
self.fields['cred_type'].initial = cred_type
|
|
|
|
# Keystone does not change project to None. If this field is left as
|
|
# "Select a project", the project will not be changed. If this field
|
|
# is set to another project, the project will be changed.
|
|
project_choices = [('', _("Select a project"))]
|
|
projects, __ = keystone.tenant_list(request)
|
|
for project in projects:
|
|
if project.enabled:
|
|
project_choices.append((project.id, project.name))
|
|
self.fields['project'].choices = project_choices
|
|
|
|
project = initial.get('project_name')
|
|
self.fields['project'].initial = project
|
|
|
|
def handle(self, request, data):
|
|
try:
|
|
params = {
|
|
'user': data['user_name'],
|
|
'type': data["cred_type"],
|
|
'blob': data["data"],
|
|
}
|
|
params['project'] = data['project'] if data['project'] else None
|
|
|
|
keystone.credential_update(request, data['id'], **params)
|
|
messages.success(
|
|
request, _("User credential updated successfully."))
|
|
return True
|
|
except Exception:
|
|
exceptions.handle(request, _('Unable to update user credential.'))
|