Ozwillo » Modules CKAN Ozwillo

from hashlib import sha1

import hmac

import logging

import ckan.plugins as plugins

from pylons import config

from ckan.common import request, _

from ckan.logic.action.create import _group_or_org_create as group_or_org_create

                                       'X-Hub-Signature')

    def decorator(func):

        def wrapper(context, data):

            if signature_header_name in request.headers:

                if request.headers[signature_header_name].startswith('sha1='):

                    algo, received_hmac = request.headers[signature_header_name].rsplit('=')

                    computed_hmac = hmac.new(api_secret, request.body, sha1).hexdigest()

                    # the received hmac is uppercase according to

                    # http://doc.ozwillo.com/#ref-3-2-1

                        raise logic.NotAuthorized(_('Invalid HMAC'))

                else:

                    log.info('Invalid HMAC algo')

                    raise logic.ValidationError(_('Invalid HMAC algo'))

                raise logic.NotAuthorized(_("No HMAC in the header"))

            return func(context, data)

        return wrapper

    return decorator

@valid_signature_required(secret_prefix='instantiation')

    model = context['model']

    destruction_secret = config.get(plugin_config_prefix + 'destruction_secret',

                                       'changeme')

    client_id = data_dict.pop('client_id')

    client_secret = data_dict.pop('client_secret')

    instance_id = data_dict.pop('instance_id')

    # re-mapping received dict

    registration_uri = data_dict.pop('instance_registration_uri')

    organization = data_dict['organization']

        'password': user['id']

    }

    user_obj = model.User.get(user_dict['name'])

        'type': 'organization',

    if not user_obj:

        user_create(context, user_dict)

    context['user'] = user_dict['name']

                                     controller='api', action='action',

                                     qualified=True)

                                           controller='organization',

                                           action='read',

                                           id=org_dict['name'],

                                           qualified=True)

                                           qualified=True,

                                           controller='home',

        group = model.Group.get(org_dict['name'])

        group.state = 'active'

        model.GroupExtra(group_id=group.id, key='client_id',

                         value=client_id).save()

        model.GroupExtra(group_id=group.id, key='client_secret',

                         value=client_secret).save()

        session.flush()

        services = {'services': [{

            'local_id': 'organization',

            'tos_uri': organization_uri,

            'policy_uri': organization_uri,

            'icon': group.image_url,

            'payment_option': 'FREE',

            'target_audience': ['PUBLIC_BODIES'],

            'contacts': [organization_uri],

            'destruction_uri': delete_uri,

            'destruction_secret': destruction_secret,

            'needed_scopes': [{

                'scope_id': 'profile',

                'motivation': 'Used to link user to the organization'

            }]

        }

                   'Accept': 'application/json'}

                      headers=headers

        log.debug('Validation error "%s" occured while creating organization' % e)

        raise

    context['ignore_auth'] = True

    _group_or_org_purge(context, data_dict, is_org=True)

    """

    Custom form ignoring 'title' and 'name' organization fields

    """

    plugins.implements(plugins.IGroupForm)

    def is_fallback(self):

    def group_types(self):

        return ('organization',)

        return 'organization'

        schema = super(OrganizationForm, self).form_to_db_schema()

        del schema['name']

        del schema['title']

        return schema

    def error403(self):

        return base.abort(403, '')

    """

    API for OASIS to create and delete an organization

    """

    plugins.implements(plugins.IActions)

    def before_map(self, map):

        # disable organization and members api

        for action in ('member_create', 'member_delete',

                       'organization_member_delete',

                       'organization_member_create',

                       'organization_create',

                       'organization_update',

                       'organization_delete'):

            map.connect('/api/{ver:.*}/action/%s' % action,

                        controller=__name__ + ':ErrorController',

                        action='error403')

        return map

    def after_map(self, map):

        return map

    def update_config(self, config):

    def get_actions(self):

        return {

            'delete-ozwillo-organization': delete_organization