75 lines
2.2 KiB
Python
75 lines
2.2 KiB
Python
from selfprivacy_api.utils import (
|
|
WriteUserData,
|
|
ensure_ssh_and_users_fields_exist,
|
|
validate_ssh_public_key,
|
|
)
|
|
|
|
|
|
def create_ssh_key(username, ssh_key):
|
|
"""Create a new ssh key"""
|
|
|
|
if not validate_ssh_public_key(ssh_key):
|
|
return (
|
|
False,
|
|
"Invalid key type. Only ssh-ed25519 and ssh-rsa are supported",
|
|
400,
|
|
)
|
|
|
|
with WriteUserData() as data:
|
|
ensure_ssh_and_users_fields_exist(data)
|
|
|
|
if username == data["username"]:
|
|
if ssh_key in data["sshKeys"]:
|
|
return False, "Key already exists", 409
|
|
|
|
data["sshKeys"].append(ssh_key)
|
|
return True, "New SSH key successfully written", 201
|
|
|
|
if username == "root":
|
|
if ssh_key in data["ssh"]["rootKeys"]:
|
|
return False, "Key already exists", 409
|
|
|
|
data["ssh"]["rootKeys"].append(ssh_key)
|
|
return True, "New SSH key successfully written", 201
|
|
|
|
for user in data["users"]:
|
|
if user["username"] == username:
|
|
if ssh_key in user["sshKeys"]:
|
|
return False, "Key already exists", 409
|
|
|
|
user["sshKeys"].append(ssh_key)
|
|
return True, "New SSH key successfully written", 201
|
|
|
|
return False, "User not found", 404
|
|
|
|
|
|
def delete_ssh_key(username, ssh_key):
|
|
"""Delete a ssh key"""
|
|
|
|
with WriteUserData() as data:
|
|
ensure_ssh_and_users_fields_exist(data)
|
|
|
|
if username == "root":
|
|
if ssh_key in data["ssh"]["rootKeys"]:
|
|
data["ssh"]["rootKeys"].remove(ssh_key)
|
|
return True, "SSH key deleted", 200
|
|
|
|
return False, "Key not found", 404
|
|
|
|
if username == data["username"]:
|
|
if ssh_key in data["sshKeys"]:
|
|
data["sshKeys"].remove(ssh_key)
|
|
return True, "SSH key deleted", 200
|
|
|
|
return False, "Key not found", 404
|
|
|
|
for user in data["users"]:
|
|
if user["username"] == username:
|
|
if ssh_key in user["sshKeys"]:
|
|
user["sshKeys"].remove(ssh_key)
|
|
return True, "SSH key deleted", 200
|
|
|
|
return False, "Key not found", 404
|
|
|
|
return False, "User not found", 404
|