SelfPrivacy/selfprivacy-rest-api
1
0
Fork 0
mirror of https://git.selfprivacy.org/SelfPrivacy/selfprivacy-rest-api.git synced 2025-02-06 16:10:39 +00:00
Code Issues Projects Releases Wiki Activity

fix: use shell=True for testing

Browse source
This commit is contained in:
dettlaff 2024-11-21 19:42:02 +04:00
parent 8782921ada
commit d40cde9281
1 changed files with 47 additions and 29 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

76
selfprivacy_api/repositories/users/kanidm_user_repository.py
View file

@ -52,16 +52,25 @@ class KanidmAdminToken:
@staticmethod
def create_and_save_token(kanidm_admin_password: str) -> str:
with temporary_env_var(key="KANIDM_PASSWORD", value=kanidm_admin_password):
kanidm_admin_token = subprocess.check_output(
[
"kanidm",
"service-account",
"api-token",
"generate",
"--rw",
"selfprivacy",
"token2",
]
# kanidm_admin_token = subprocess.check_output(
# [
# "kanidm",
# "service-account",
# "api-token",
# "generate",
# "--rw",
# "selfprivacy",
# "token2",
# ]
# )
kanidm_admin_token = (
subprocess.check_output(
"kanidm service-account api-token generate --rw selfprivacy token2",
shell=True,
stderr=subprocess.STDOUT,
)
.decode("utf-8")
.strip()
)
redis.set("kanidm:token", kanidm_admin_token)
@ -69,25 +78,34 @@ class KanidmAdminToken:
@staticmethod
def reset_and_save_idm_admin_password() -> str:
new_kanidm_admin_password = subprocess.check_output(
[
"kanidmd",
"recover-account",
"-c",
"/etc/kanidm/server.toml",
"idm_admin",
"-o",
"json",
"2>/dev/null",
"|",
"grep",
"'{\"password'",
"|",
"jq",
"-r",
".password",
]
).decode("utf-8")
# new_kanidm_admin_password = subprocess.check_output(
# [
# "kanidmd",
# "recover-account",
# "-c",
# "/etc/kanidm/server.toml",
# "idm_admin",
# "-o",
# "json",
# "2>/dev/null",
# "|",
# "grep",
# "'{\"password'",
# "|",
# "jq",
# "-r",
# ".password",
# ]
# ).decode("utf-8")
new_kanidm_admin_password = (
subprocess.check_output(
"kanidmd recover-account -c /etc/kanidm/server.toml idm_admin -o json 2>/dev/null | grep '{\"password' | jq -r .password",
shell=True,
stderr=subprocess.STDOUT,
)
.decode("utf-8")
.strip()
)
redis.set("kanidm:password", new_kanidm_admin_password)
return new_kanidm_admin_password