Auth

Complexity

Total Complexity

10

Size/Duplication

Total Lines	63
Duplicated Lines	0 %

1 Method

Rating	Name	Duplication	Size	Complexity
D	run()	0	62	10

#!/usr/bin/env python

# Licensed to the StackStorm, Inc ('StackStorm') under one or more
# contributor license agreements.  See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License.  You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

from st2actions.runners.pythonrunner import Action
import duo_client


class Auth(Action):
    def run(self, username, factor,
            ipaddr, device, push_type, passcode, push_info):
        """
        Auth against the Duo Platorm.

        Returns: An dict with info returned by Duo.

        Raises:
          ValueError: On Auth Failure.
        """

        try:
            ikey = self.config['auth']['ikey']
            skey = self.config['auth']['skey']
            host = self.config['auth']['host']
        except KeyError:
            raise ValueError("Duo config not found in config.")

        auth = duo_client.Auth(ikey=ikey,
                               skey=skey,
                               host=host)

        auth_kargs = {}

        if factor == "auto" or factor == "push":
            auth_kargs['type'] = push_type
            auth_kargs['device'] = device

            if ipaddr is not None:
                auth_kargs['ipaddr'] = ipaddr

            if push_info is not None:
                auth_kargs['push_info'] = push_info
        elif factor == "passcode":
            auth_kargs['passcode'] = passcode
        elif factor == "phone":
            auth_kargs['device'] = device
        elif factor == "sms":
            # As 'sms' just denies and then we do not support it
            # requires re-authentication.

            print "Denied, we do not support SMS!"
            raise ValueError("Denied, we do not support SMS!")
        else:
            raise ValueError("Invalid factor!")

        try:
            data = auth.auth(factor=factor,
                             username=username,
                             **auth_kargs)
        except RuntimeError, e:
            print "Error: %s" % e
            raise ValueError("Error: %s" % e)
        else:
            if data['status'] == "allow":
                return data
            elif data['status'] == "deny":
                print data['status_msg']
                raise ValueError("Duo login denied! {}".format(
                    data['status_msg']))
            else:
                raise ValueError("Invalid status")