statusdb_snicuser_checker.py

#!/usr/bin/env python
"""
Get open projects from statusdb, checks if the users have a SNIC account and
writes the result back into statusdb.
"""
import argparse
import yaml
from couchdb import Server
import requests
from requests.auth import HTTPBasicAuth
import json
import sys

def update_statusdb(config, dryrun=True):
    if not config['statusdb']:
        print('Statusdb credentials not found')
        sys.exit(1)
    url_string = 'http://{}:{}@{}:{}'.format(config['statusdb'].get('username'), config['statusdb'].get('password'),
                                              config['statusdb'].get('url'), config['statusdb'].get('port'))
    couch = Server(url=url_string)
    assert couch, 'Could not connect to {}'.format(settings.get('url'))

    proj_db = couch['projects']
    open_projs = proj_db.view('project/summary',include_docs=True, descending=True)[['open','Z']:['open','']]

    for project in open_projs:
        doc = project.doc
        update_doc = False
        if not project.value.get('delivery_type') == 'GRUS':
            continue
        if project.value['details'].get('snic_checked'):
            if not project.value['details']['snic_checked']['status']:
                email = project.value['order_details']['fields'].get('project_pi_email')
                check = snic_check(email, config['SNIC'])
                if check:
                    doc['details']['snic_checked']['status'] = check
                    update_doc = True

        else:
            snic_checked = {}
            if project.value.get('order_details'):
                email = project.value['order_details']['fields'].get('project_pi_email')
                if email:
                    snic_checked['status'] = snic_check(email, config['SNIC'])
                #Add the new field to project details
                doc['details']['snic_checked'] = snic_checked
                update_doc = True
        #write to projects doc
        if update_doc:
            if not dryrun:
                proj_db.save(doc)
            else:
                print(doc['project_name'], doc['details']['snic_checked'])

def snic_check(email, config):
    url = 'https://supr.snic.se/api/person/email_present/?email={}'.format(email)
    response = requests.get(url, auth=HTTPBasicAuth(config.get('username'), config.get('password')))
    if not response.ok and response.reason == 'Unauthorized':
        print('ERROR: SNIC API is IP restricted and this script can only be run from ngi-internal OR credentials are wrong')
        sys.exit(1)
    return json.loads(response.content)['email_present']

if __name__ == '__main__':
    parser = argparse.ArgumentParser(description=__doc__)
    parser.add_argument('--statusdb_config', metavar='Path to statusdb config file', help='Path to yaml file with credentials for statusdb')
    parser.add_argument('--snic_config', metavar='Path to snic config file', help='Path to yaml file with credentials for SNIC API')
    parser.add_argument('--check_email', metavar='Option to run script to check emails',
                        help='Check an individual email directly in SNIC')
    parser.add_argument('-d', '--dryrun',
                      action='store_true', dest='dryrun', default=False,
                      help='Use this to print out what would have been saved to statusdb')

    args = parser.parse_args()
    config = {}
    with open(args.statusdb_config) as config_file:
        config = yaml.load(config_file, Loader=yaml.SafeLoader)
    with open(args.snic_config) as config_file:
        config.update(yaml.load(config_file, Loader=yaml.SafeLoader))
    if args.check_email:
        if config.get('SNIC'):
            result = snic_check(args.check_email, config['SNIC'])
            print('The email "{}" has {} associated SNIC account.'.format(args.check_email, 'an' if result else 'NO'))
        else:
            print('SNIC credentials not found')
    else:
        update_statusdb(config, args.dryrun)