Integrated OAuth2 Support - Githubissues

PaloAltoNetworks / pan-cortex-data-lake-python

Python idiomatic SDK for Cortex™ Data Lake.

https://cortex.pan.dev/docs/data_lake/develop/cdl_python_installation

ISC License

44 stars 18 forks source link

Integrated OAuth2 Support #15

Closed sserrata closed 6 years ago

sserrata commented 6 years ago

Palo Alto Networks Cloud Python SDK version: 1.0.2
Python version: 2.7.x, 3.5.x, 3.6.x
Operating System: Any

Description

Add OAuth2 support for performing token refresh and revocation
Add support to HTTPClient for auto-refresh
Add support for storing credentials in ~/.config/pancloud and as environment variables

Implementation Plan

Add credentials module that supports construction of Credentials object
Add property methods for retrieving access_token, client_id, client_secret, and refresh_token.
Add the following methods: _fetch_credential, get_credentials, remove_profile, refresh, write_credentials.
Use TinyDB to upsert and store credentials in JSON format in ~/.config/pancloud directory.

sserrata commented 6 years ago

Update

Added methods revoke_access_token and revoke_refresh_token.
Added _resolve_credential method which looks for credential in 1) ENVIRON, 2) Credentials file.
Added region, redirect_uri and auth_base_url variables/attributes.
Added method get_authorization_url for generating authorization URL and returning state.
Integrated Credentials with HTTPClient to support auto_refresh and automatic application of access_token to Authorization: Bearer header.

Currently evaluating effectiveness of this design pattern and will submit a PR when ready.

For those brave souls looking to preview: https://github.com/sserrata/pancloud/tree/feature-credentials