Add api to change paasToken

Signed-off-by: loheagn <[email protected]>

Author: loheagn

cloudapi-common/src/main/kotlin/cn/edu/buaa/scs/utils/HttpClient.kt

@@ -32,6 +32,18 @@ class HttpClientWrapper(val client: HttpClient, val basePath: String) {
         return handleResponse(response)
     }
 
+    suspend inline fun <reified T> put(
+        path: String,
+        body: Any? = null,
+        contentType: ContentType = ContentType.Application.Json,
+    ): Result<T> {
+        val response = client.put(basePath + path) {
+            contentType(contentType)
+            setBody(body)
+        }
+        return handleResponse(response)
+    }
+
     suspend inline fun <reified T> delete(
         path: String,
         body: Any? = null,

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/bugit/GitClient.kt

@@ -119,6 +119,10 @@ object GitClient : IProjectManager {
         return client.delete("/orgs/$projectName/memberships/$memberID")
     }
 
+    override suspend fun changePassword(username: String, password: String): Result<Unit> {
+        return client.put("/admin/users/${username.lowercase()}/password", ChangePasswordReq(password))
+    }
+
     suspend fun getRepoListOfProject(projectName: String): Result<List<GitRepo>> {
         return client.get("orgs/$projectName/repos")
     }

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/bugit/Models.kt

@@ -108,3 +108,8 @@ data class CreateUserReq(
     val email: String,
     val password: String
 )
+
+data class ChangePasswordReq(
+    @JsonProperty("password")
+    val password: String
+)

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/controller/models/PutPaasTokenRequest.kt

@@ -0,0 +1,22 @@
+/**
+* cloudapi_v2
+* buaa scs cloud api v2
+*
+* The version of the OpenAPI document: 2.0
+* Contact: [email protected]
+*
+* NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+* https://openapi-generator.tech
+* Do not edit the class manually.
+*/
+package cn.edu.buaa.scs.controller.models
+
+
+/**
+ * 
+ * @param paasToken 
+ */
+data class PutPaasTokenRequest(
+    val paasToken: kotlin.String
+) 
+

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/harbor/HarborClient.kt

@@ -87,6 +87,12 @@ object HarborClient : IProjectManager {
         deleteProjectMember(projectName, memberID)
     }
 
+    override suspend fun changePassword(username: String, password: String): Result<Unit> = runCatching {
+        val users = userClient.searchUsers(username.lowercase())
+        if (users.isEmpty()) throw Exception("User $username not found in harbor")
+        userClient.updateUserPassword(users[0].userId!!, PasswordReq(newPassword = password))
+    }
+
     private fun existProject(projectName: String): Boolean {
         return try {
             projectClient.getProject(projectName)

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/kube/BusinessKubeClient.kt

@@ -149,6 +149,10 @@ metadata:
     override suspend fun removeProjectMember(projectName: String, memberID: String): Result<Unit> {
         return Result.success(Unit)
     }
+
+    override suspend fun changePassword(username: String, password: String): Result<Unit> {
+        return Result.success(Unit)
+    }
 }
 
 fun Route.podLogWsRoute() {

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/project/Interface.kt

@@ -24,10 +24,12 @@ interface IProjectManager {
     suspend fun addProjectMember(projectName: String, memberID: String): Result<Unit>
 
     suspend fun removeProjectMember(projectName: String, memberID: String): Result<Unit>
+
+    suspend fun changePassword(username: String, password: String): Result<Unit>
 }
 
 val managerList = listOf(
     GitClient,
     HarborClient,
     BusinessKubeClient,
-)
+)

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/route/Auth.kt

@@ -2,8 +2,10 @@ package cn.edu.buaa.scs.route
 
 import cn.edu.buaa.scs.controller.models.GetCaptcha200Response
 import cn.edu.buaa.scs.controller.models.PostLoginRequest
+import cn.edu.buaa.scs.controller.models.PutPaasTokenRequest
 import cn.edu.buaa.scs.model.Authentication
 import cn.edu.buaa.scs.service.auth
+import cn.edu.buaa.scs.service.project
 import cn.edu.buaa.scs.utils.token
 import cn.edu.buaa.scs.utils.user
 import io.ktor.server.application.*
@@ -60,4 +62,12 @@ fun Route.authRoute() {
             call.respond(call.auth.checkPermission(entityType, entityId, action))
         }
     }
+
+    route("/paasToken") {
+        put {
+            val password = call.receive<PutPaasTokenRequest>().paasToken
+            call.project.changePassword(password)
+            call.respond("OK")
+        }
+    }
 }

cloudapi-web/src/main/kotlin/cn/edu/buaa/scs/service/Project.kt

@@ -208,6 +208,15 @@ class ProjectService(val call: ApplicationCall) : IService, FileService.FileDeco
         }
     }
 
+    suspend fun changePassword(password: String) {
+        val user = call.user()
+        managerList.forEach {
+            it.changePassword(user.id, password).getOrThrow()
+        }
+        user.paasToken = password
+        user.flushChanges()
+    }
+
     suspend fun addProjectMember(projectID: Long, memberID: String, role: ProjectRole): ProjectMember {
         val project = Project.id(projectID)
         if (!call.user().isProjectAdmin(project)) {

openapi/cloudapi_v2.yaml

@@ -2260,6 +2260,28 @@ paths:
       description: 根据ID删除某项实验工作流配置
       security:
         - Authorization: []
+  /paasToken:
+    put:
+      summary: 修改PaaS平台通用token
+      operationId: put-paasToken
+      responses:
+        '200':
+          description: OK
+      tags:
+        - 鉴权
+      description: 修改PaaS平台通用token
+      security:
+        - Authorization: []
+      requestBody:
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                paasToken:
+                  type: string
+              required:
+                - paasToken
 components:
   schemas:
     AssignmentResponse: