sfa/methods/Renew.py

   1 import datetime
   2
   3 from sfa.util.faults import InsufficientRights
   4 from sfa.util.xrn import urn_to_hrn
   5 from sfa.util.method import Method
   6 from sfa.util.sfatime import utcparse
   7
   8 from sfa.trust.credential import Credential
   9
  10 from sfa.storage.parameter import Parameter
  11
  12 class Renew(Method):
  13     """
  14     Renews the resources in the specified slice or slivers by
  15     extending the lifetime.
  16
  17     @param surn ([string]) List of URNs of to renew
  18     @param credentials ([string]) of credentials
  19     @param expiration_time (string) requested time of expiration
  20     @param options (dict) options
  21     """
  22     interfaces = ['aggregate', 'slicemgr']
  23     accepts = [
  24         Parameter(type([str]), "Slice URN"),
  25         Parameter(type([str]), "List of credentials"),
  26         Parameter(str, "Expiration time in RFC 3339 format"),
  27         Parameter(dict, "Options"),
  28         ]
  29     returns = Parameter(bool, "Success or Failure")
  30
  31     def call(self, urns, creds, expiration_time, options):
  32
  33
  34         # Find the valid credentials
  35         valid_creds = self.api.auth.checkCredentialsSpeaksFor(creds, 'renewsliver', urns,
  36                                                               check_sliver_callback = self.api.driver.check_sliver_credentials,
  37                                                               options=options)
  38         the_credential = Credential(cred=valid_creds[0])
  39         actual_caller_hrn = the_credential.actual_caller_hrn()
  40         self.api.logger.info("interface: %s\tcaller-hrn: %s\ttarget-urns: %s\texp:%s\tmethod-name: %s"%\
  41                              (self.api.interface, actual_caller_hrn, urns, expiration_time,self.name))
  42
  43
  44         # Validate that the time does not go beyond the credential's expiration time
  45         requested_time = utcparse(expiration_time)
  46         max_renew_days = int(self.api.config.SFA_MAX_SLICE_RENEW)
  47         if requested_time > Credential(cred=valid_creds[0]).get_expiration():
  48             raise InsufficientRights('Renewsliver: Credential expires before requested expiration time')
  49         if requested_time > datetime.datetime.utcnow() + datetime.timedelta(days=max_renew_days):
  50             raise Exception('Cannot renew > %s days from now' % max_renew_days)
  51         return self.api.manager.Renew(self.api, urns, creds, expiration_time, options)
  52