|
@@ -75,7 +75,8 @@ class SFTPGoApiRequests:
|
|
|
max_sessions=0, quota_size=0, quota_files=0, permissions={}, upload_bandwidth=0, download_bandwidth=0,
|
|
|
status=1, expiration_date=0, allowed_ip=[], denied_ip=[], fs_provider='local', s3_bucket='',
|
|
|
s3_region='', s3_access_key='', s3_access_secret='', s3_endpoint='', s3_storage_class='',
|
|
|
- s3_key_prefix='', gcs_bucket='', gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file=''):
|
|
|
+ s3_key_prefix='', gcs_bucket='', gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file='',
|
|
|
+ gcs_automatic_credentials='automatic'):
|
|
|
user = {'id':user_id, 'username':username, 'uid':uid, 'gid':gid,
|
|
|
'max_sessions':max_sessions, 'quota_size':quota_size, 'quota_files':quota_files,
|
|
|
'upload_bandwidth':upload_bandwidth, 'download_bandwidth':download_bandwidth,
|
|
@@ -95,7 +96,8 @@ class SFTPGoApiRequests:
|
|
|
user.update({'filters':self.buildFilters(allowed_ip, denied_ip)})
|
|
|
user.update({'filesystem':self.buildFsConfig(fs_provider, s3_bucket, s3_region, s3_access_key, s3_access_secret,
|
|
|
s3_endpoint, s3_storage_class, s3_key_prefix, gcs_bucket,
|
|
|
- gcs_key_prefix, gcs_storage_class, gcs_credentials_file)})
|
|
|
+ gcs_key_prefix, gcs_storage_class, gcs_credentials_file,
|
|
|
+ gcs_automatic_credentials)})
|
|
|
return user
|
|
|
|
|
|
def buildPermissions(self, root_perms, subdirs_perms):
|
|
@@ -130,7 +132,8 @@ class SFTPGoApiRequests:
|
|
|
return filters
|
|
|
|
|
|
def buildFsConfig(self, fs_provider, s3_bucket, s3_region, s3_access_key, s3_access_secret, s3_endpoint,
|
|
|
- s3_storage_class, s3_key_prefix, gcs_bucket, gcs_key_prefix, gcs_storage_class, gcs_credentials_file):
|
|
|
+ s3_storage_class, s3_key_prefix, gcs_bucket, gcs_key_prefix, gcs_storage_class,
|
|
|
+ gcs_credentials_file, gcs_automatic_credentials):
|
|
|
fs_config = {'provider':0}
|
|
|
if fs_provider == 'S3':
|
|
|
s3config = {'bucket':s3_bucket, 'region':s3_region, 'access_key':s3_access_key, 'access_secret':
|
|
@@ -139,9 +142,14 @@ class SFTPGoApiRequests:
|
|
|
fs_config.update({'provider':1, 's3config':s3config})
|
|
|
elif fs_provider == 'GCS':
|
|
|
gcsconfig = {'bucket':gcs_bucket, 'key_prefix':gcs_key_prefix, 'storage_class':gcs_storage_class}
|
|
|
+ if gcs_automatic_credentials == "automatic":
|
|
|
+ gcsconfig.update({'automatic_credentials':1})
|
|
|
+ else:
|
|
|
+ gcsconfig.update({'automatic_credentials':0})
|
|
|
if gcs_credentials_file:
|
|
|
with open(gcs_credentials_file) as creds:
|
|
|
- gcsconfig.update({'credentials':base64.b64encode(creds.read().encode('UTF-8')).decode('UTF-8')})
|
|
|
+ gcsconfig.update({'credentials':base64.b64encode(creds.read().encode('UTF-8')).decode('UTF-8'),
|
|
|
+ 'automatic_credentials':0})
|
|
|
fs_config.update({'provider':2, 'gcsconfig':gcsconfig})
|
|
|
return fs_config
|
|
|
|
|
@@ -158,12 +166,12 @@ class SFTPGoApiRequests:
|
|
|
quota_files=0, perms=[], upload_bandwidth=0, download_bandwidth=0, status=1, expiration_date=0,
|
|
|
subdirs_permissions=[], allowed_ip=[], denied_ip=[], fs_provider='local', s3_bucket='', s3_region='',
|
|
|
s3_access_key='', s3_access_secret='', s3_endpoint='', s3_storage_class='', s3_key_prefix='', gcs_bucket='',
|
|
|
- gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file=''):
|
|
|
+ gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file='', gcs_automatic_credentials='automatic'):
|
|
|
u = self.buildUserObject(0, username, password, public_keys, home_dir, uid, gid, max_sessions,
|
|
|
quota_size, quota_files, self.buildPermissions(perms, subdirs_permissions), upload_bandwidth, download_bandwidth,
|
|
|
status, expiration_date, allowed_ip, denied_ip, fs_provider, s3_bucket, s3_region, s3_access_key,
|
|
|
s3_access_secret, s3_endpoint, s3_storage_class, s3_key_prefix, gcs_bucket, gcs_key_prefix, gcs_storage_class,
|
|
|
- gcs_credentials_file)
|
|
|
+ gcs_credentials_file, gcs_automatic_credentials)
|
|
|
r = requests.post(self.userPath, json=u, auth=self.auth, verify=self.verify)
|
|
|
self.printResponse(r)
|
|
|
|
|
@@ -171,12 +179,13 @@ class SFTPGoApiRequests:
|
|
|
quota_size=0, quota_files=0, perms=[], upload_bandwidth=0, download_bandwidth=0, status=1,
|
|
|
expiration_date=0, subdirs_permissions=[], allowed_ip=[], denied_ip=[], fs_provider='local',
|
|
|
s3_bucket='', s3_region='', s3_access_key='', s3_access_secret='', s3_endpoint='', s3_storage_class='',
|
|
|
- s3_key_prefix='', gcs_bucket='', gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file=''):
|
|
|
+ s3_key_prefix='', gcs_bucket='', gcs_key_prefix='', gcs_storage_class='', gcs_credentials_file='',
|
|
|
+ gcs_automatic_credentials='automatic'):
|
|
|
u = self.buildUserObject(user_id, username, password, public_keys, home_dir, uid, gid, max_sessions,
|
|
|
quota_size, quota_files, self.buildPermissions(perms, subdirs_permissions), upload_bandwidth, download_bandwidth,
|
|
|
status, expiration_date, allowed_ip, denied_ip, fs_provider, s3_bucket, s3_region, s3_access_key,
|
|
|
s3_access_secret, s3_endpoint, s3_storage_class, s3_key_prefix, gcs_bucket, gcs_key_prefix, gcs_storage_class,
|
|
|
- gcs_credentials_file)
|
|
|
+ gcs_credentials_file, gcs_automatic_credentials)
|
|
|
r = requests.put(urlparse.urljoin(self.userPath, 'user/' + str(user_id)), json=u, auth=self.auth, verify=self.verify)
|
|
|
self.printResponse(r)
|
|
|
|
|
@@ -448,6 +457,8 @@ def addCommonUserArguments(parser):
|
|
|
' Default: %(default)s')
|
|
|
parser.add_argument('--gcs-storage-class', type=str, default='', help='Default: %(default)s')
|
|
|
parser.add_argument('--gcs-credentials-file', type=str, default='', help='Default: %(default)s')
|
|
|
+ parser.add_argument('--gcs-automatic-credentials', type=str, default='automatic', choices=['explicit', 'automatic'],
|
|
|
+ help='If you provide a credentials file this argument will be setted to "explicit". Default: %(default)s')
|
|
|
|
|
|
|
|
|
if __name__ == '__main__':
|
|
@@ -558,7 +569,7 @@ if __name__ == '__main__':
|
|
|
args.status, getDatetimeAsMillisSinceEpoch(args.expiration_date), args.subdirs_permissions, args.allowed_ip,
|
|
|
args.denied_ip, args.fs, args.s3_bucket, args.s3_region, args.s3_access_key, args.s3_access_secret,
|
|
|
args.s3_endpoint, args.s3_storage_class, args.s3_key_prefix, args.gcs_bucket, args.gcs_key_prefix,
|
|
|
- args.gcs_storage_class, args.gcs_credentials_file)
|
|
|
+ args.gcs_storage_class, args.gcs_credentials_file, args.gcs_automatic_credentials)
|
|
|
elif args.command == 'update-user':
|
|
|
api.updateUser(args.id, args.username, args.password, args.public_keys, args.home_dir, args.uid, args.gid,
|
|
|
args.max_sessions, args.quota_size, args.quota_files, args.permissions, args.upload_bandwidth,
|
|
@@ -566,7 +577,7 @@ if __name__ == '__main__':
|
|
|
args.subdirs_permissions, args.allowed_ip, args.denied_ip, args.fs, args.s3_bucket, args.s3_region,
|
|
|
args.s3_access_key, args.s3_access_secret, args.s3_endpoint, args.s3_storage_class,
|
|
|
args.s3_key_prefix, args.gcs_bucket, args.gcs_key_prefix, args.gcs_storage_class,
|
|
|
- args.gcs_credentials_file)
|
|
|
+ args.gcs_credentials_file, args.gcs_automatic_credentials)
|
|
|
elif args.command == 'delete-user':
|
|
|
api.deleteUser(args.id)
|
|
|
elif args.command == 'get-users':
|