summaryrefslogtreecommitdiff
path: root/src/conf_mode/https.py
diff options
context:
space:
mode:
authorDaniil Baturin <daniil@baturin.org>2023-12-04 15:48:15 +0000
committerDaniil Baturin <daniil@baturin.org>2023-12-04 15:48:15 +0000
commit7bd6047901167352770b31fe47031363cad5b94d (patch)
tree337fa11842302140887bfc5738ead6566829c521 /src/conf_mode/https.py
parenta29aba5d92ad210b95226acfe756794d59068fc3 (diff)
downloadvyos-1x-7bd6047901167352770b31fe47031363cad5b94d.tar.gz
vyos-1x-7bd6047901167352770b31fe47031363cad5b94d.zip
Revert "https api: T5772: fix Python version not supporting f-ormated strings and dict parsing"
This reverts commit e7efd65483e7f6e1902a9ab88f8453d5fbb63c09.
Diffstat (limited to 'src/conf_mode/https.py')
-rwxr-xr-xsrc/conf_mode/https.py43
1 files changed, 20 insertions, 23 deletions
diff --git a/src/conf_mode/https.py b/src/conf_mode/https.py
index af0e85af5..349cec888 100755
--- a/src/conf_mode/https.py
+++ b/src/conf_mode/https.py
@@ -136,14 +136,6 @@ def get_config():
if conf.exists('api port'):
port = conf.return_value('api port')
api_data['port'] = port
- if conf.exists('api keys id'):
- for id in conf.list_nodes('api keys id'):
- tmp = {"id": id}
- if conf.exists('api keys id ' + id + ' key'):
- key = conf.return_value('api keys id ' + id + ' key')
- tmp.update({'key':key})
- api_data['api_keys'].append(tmp)
-
if api_data:
for block in server_block_list:
block['api'] = api_data
@@ -152,23 +144,28 @@ def get_config():
return https
def verify(https):
- if https is None:
- return None
-
# Verify API server settings, if present
- if 'server_block_list' in https:
- for server in https['server_block_list']:
- if 'api' in server:
- keys = dict_search('api.api_keys', server)
-
- # Check for incomplete key configurations in every case
- valid_keys_exist = False
- if keys:
- for k in keys:
- if 'key' not in k:
- raise ConfigError('Missing HTTPS API key string for key id: ' + k['id'])
+ if 'api' in https:
+ keys = dict_search('api.keys.id', https)
+ gql_auth_type = dict_search('api.graphql.authentication.type', https)
+
+ # If "api graphql" is not defined and `gql_auth_type` is None,
+ # there's certainly no JWT auth option, and keys are required
+ jwt_auth = (gql_auth_type == "token")
+
+ # Check for incomplete key configurations in every case
+ valid_keys_exist = False
+ if keys:
+ for k in keys:
+ if 'key' not in keys[k]:
+ raise ConfigError(f'Missing HTTPS API key string for key id "{k}"')
else:
- raise ConfigError('At least one HTTPS API key is required!')
+ valid_keys_exist = True
+
+ # If only key-based methods are enabled,
+ # fail the commit if no valid key configurations are found
+ if (not valid_keys_exist) and (not jwt_auth):
+ raise ConfigError('At least one HTTPS API key is required unless GraphQL token authentication is enabled')
return None