Class: Legate::CLI::AuthSchemeCommands

Inherits:

BaseCommand

• Object
• Thor
• BaseCommand
• Legate::CLI::AuthSchemeCommands

Includes:

AuthCommandHelpers

Defined in:

lib/legate/cli/auth_commands.rb

Overview

Scheme management subcommands

Instance Method Summary

• #create(name) ⇒ Object
• #delete(name) ⇒ Object
• #list ⇒ Object
• #show(name) ⇒ Object

Methods included from AuthCommandHelpers

#auth_manager, #credential_type_description, #mask_sensitive_value, #print_header, #print_row, #scheme_type_description, #sensitive_field?

Methods inherited from BaseCommand

#tree

Instance Method Details

#create(name) ⇒ Object

# File 'lib/legate/cli/auth_commands.rb', line 135

def create(name)
  scheme_name = name.to_sym
  scheme_type = options[:type].to_sym

  if auth_manager.get_scheme(scheme_name)
    puts ::CLI::UI.fmt("{{red:Scheme already exists:}} #{name}")
    exit 1
  end

  scheme = case scheme_type
           when :api_key
             Legate::Auth::Schemes::ApiKey.new
           when :http_bearer
             Legate::Auth::Schemes::HTTPBearer.new
           when :oauth2
             Legate::Auth::Schemes::OAuth2.new(
               authorization_url: options[:authorization_url],
               token_url: options[:token_url],
               scopes: options[:scopes]&.split(/\s+/),
               use_pkce: options[:use_pkce],
               revocation_url: options[:revocation_url]
             )
           when :oidc, :openid_connect
             Legate::Auth::Schemes::OpenIDConnect.new(
               authorization_url: options[:authorization_url],
               token_url: options[:token_url],
               userinfo_url: options[:userinfo_url],
               scopes: options[:scopes]&.split(/\s+/),
               use_pkce: options[:use_pkce]
             )
           when :service_account
             Legate::Auth::Schemes::ServiceAccount.new(
               token_url: options[:token_url],
               scopes: options[:scopes]&.split(/\s+/)
             )
           when :google_service_account
             Legate::Auth::Schemes::GoogleServiceAccount.new(
               scopes: options[:scopes]&.split(/\s+/)
             )
           else
             puts ::CLI::UI.fmt("{{red:Unsupported scheme type:}} #{scheme_type}")
             exit 1
           end

  auth_manager.register_scheme(scheme, scheme_name)
  puts ::CLI::UI.fmt("{{green:✓}} Scheme '#{name}' created successfully")
end

#delete(name) ⇒ Object

# File 'lib/legate/cli/auth_commands.rb', line 185

def delete(name)
  scheme_name = name.to_sym

  unless auth_manager.get_scheme(scheme_name)
    puts ::CLI::UI.fmt("{{red:Scheme not found:}} #{name}")
    exit 1
  end

  # Check for dependent mappings
  url_mappings = auth_manager.instance_variable_get(:@url_mappings) || []
  dependent = url_mappings.select { |m| m[:scheme_name] == scheme_name }

  if dependent.any? && !options[:force]
    puts ::CLI::UI.fmt("{{red:Cannot delete}} - scheme is used by #{dependent.size} URL mapping(s)")
    puts 'Use --force to delete anyway'
    exit 1
  end

  auth_manager.unregister_scheme(scheme_name)
  puts ::CLI::UI.fmt("{{green:✓}} Scheme '#{name}' deleted")
end

#list ⇒ Object

# File 'lib/legate/cli/auth_commands.rb', line 85

def list
  schemes = auth_manager.instance_variable_get(:@schemes) || {}

  if schemes.empty?
    puts ::CLI::UI.fmt('{{yellow:No authentication schemes registered.}}')
    return
  end

  print_header("Authentication Schemes (#{schemes.size})")
  puts

  schemes.each do |name, scheme|
    puts ::CLI::UI.fmt("  {{bold:#{name}}} {{gray:(#{scheme.scheme_type})}}")
    puts "    #{scheme_type_description(scheme.scheme_type)}"
    puts
  end
end

#show(name) ⇒ Object

# File 'lib/legate/cli/auth_commands.rb', line 104

def show(name)
  scheme = auth_manager.get_scheme(name.to_sym)

  unless scheme
    puts ::CLI::UI.fmt("{{red:Scheme not found:}} #{name}")
    exit 1
  end

  print_header("Scheme: #{name}")
  print_row('Type', scheme.scheme_type)
  print_row('Class', scheme.class.name.split('::').last)
  print_row('Description', scheme_type_description(scheme.scheme_type))

  # Show scheme-specific config
  config = scheme.to_h
  config.each do |key, value|
    next if key == :type

    print_row(key.to_s.capitalize, value) if value
  end
end