stash

backend/backend/urls.py

@@ -36,6 +36,7 @@ urlpatterns = [
     path('admin/', include('hostadmin.api')),
     path('api/', include('toolshed.api.friend')),
     path('api/', include('toolshed.api.group')),
+    path('api/', include('toolshed.api.idmap')),
     path('api/', include('toolshed.api.inventory')),
     path('api/', include('toolshed.api.info')),
     path('api/', include('toolshed.api.files')),

backend/toolshed/api/idmap.py

@@ -0,0 +1,28 @@
+from django.urls import path
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+from rest_framework.views import APIView
+from rest_framework.viewsets import ViewSetMixin
+
+from authentication.models import KnownIdentity
+from authentication.signature_auth import SignatureAuthentication
+from toolshed.serializers import FriendSerializer, GroupIdMapSerializer
+
+
+class IdMap(APIView, ViewSetMixin):
+    authentication_classes = [SignatureAuthentication]
+    permission_classes = [IsAuthenticated]
+
+    def get(self, request, format=None):  # /api/idmap/
+        identity = request.user
+        identities = identity.friends.all() | KnownIdentity.objects.filter(pk=identity.pk)
+        groups = identity.member_of_groups.all()
+        return Response({
+            'identities': FriendSerializer(identities, many=True).data,
+            'groups': GroupIdMapSerializer(groups, many=True).data,
+        })
+
+
+urlpatterns = [
+    path('idmap/', IdMap.as_view(), name='idmap'),
+]

backend/toolshed/serializers.py

@@ -92,6 +92,17 @@ class GroupSerializer(serializers.ModelSerializer):
         return str(obj)
 
 
+class GroupIdMapSerializer(serializers.ModelSerializer):
+    handle = serializers.SerializerMethodField()
+
+    class Meta:
+        model = Group
+        fields = ['id', 'name', 'domain', 'handle']
+
+    def get_handle(self, obj):
+        return str(obj)
+
+
 class GroupInviteIncomingSerializer(serializers.ModelSerializer):
     group = serializers.SerializerMethodField()
     inviter = serializers.SerializerMethodField()

backend/toolshed/tests/test_idmap.py

@@ -0,0 +1,48 @@
+from django.test import Client
+
+from authentication.tests import SignatureAuthClient, UserTestMixin, GroupTestMixin, ToolshedTestCase
+
+client = SignatureAuthClient()
+
+
+class IdMapTestCase(UserTestMixin, GroupTestMixin, ToolshedTestCase):
+    def setUp(self):
+        super().setUp()
+        self.prepare_users()
+
+    def test_idmap_includes_self(self):
+        reply = client.get('/api/idmap/', self.f['local_user1'])
+        self.assertEqual(reply.status_code, 200)
+        identities = reply.json()['identities']
+        self.assertIn(str(self.f['local_user1']), [i['username'] for i in identities])
+
+    def test_idmap_includes_friends(self):
+        self.f['local_user1'].friends.add(self.f['local_user2'].public_identity)
+        reply = client.get('/api/idmap/', self.f['local_user1'])
+        self.assertEqual(reply.status_code, 200)
+        identities = reply.json()['identities']
+        self.assertIn(str(self.f['local_user2']), [i['username'] for i in identities])
+
+    def test_idmap_excludes_non_friends(self):
+        reply = client.get('/api/idmap/', self.f['local_user1'])
+        self.assertEqual(reply.status_code, 200)
+        identities = reply.json()['identities']
+        self.assertNotIn(str(self.f['local_user2']), [i['username'] for i in identities])
+
+    def test_idmap_includes_member_groups(self):
+        self.prepare_groups()
+        reply = client.get('/api/idmap/', self.f['local_user1'])
+        self.assertEqual(reply.status_code, 200)
+        groups = reply.json()['groups']
+        self.assertIn(str(self.f['group1']), [g['handle'] for g in groups])
+
+    def test_idmap_excludes_non_member_groups(self):
+        self.prepare_groups()
+        reply = client.get('/api/idmap/', self.f['local_user2'])
+        self.assertEqual(reply.status_code, 200)
+        groups = reply.json()['groups']
+        self.assertNotIn(str(self.f['group1']), [g['handle'] for g in groups])
+
+    def test_idmap_unauthenticated(self):
+        reply = Client().get('/api/idmap/')
+        self.assertEqual(reply.status_code, 403)