added request_hash argument. authenticate the credential using request_hash
[sfa.git] / sfa / methods / resolve.py
1 ### $Id$
2 ### $URL$
3 import traceback
4 from sfa.util.faults import *
5 from sfa.util.method import Method
6 from sfa.util.parameter import Parameter, Mixed
7 from sfa.trust.auth import Auth
8 from sfa.util.record import GeniRecord
9 from sfa.util.genitable import GeniTable
10 from sfa.util.debug import log
11 from sfa.server.registry import Registries
12 from sfa.util.prefixTree import prefixTree
13 from sfa.trust.credential import Credential
14
15 class resolve(Method):
16     """
17     Resolve a record.
18
19     @param cred credential string authorizing the caller
20     @param hrn human readable name to resolve
21     @return a list of record dictionaries or empty list     
22     """
23
24     interfaces = ['registry']
25     
26     accepts = [
27         Parameter(str, "Credential string"),
28         Parameter(str, "Human readable name (hrn)"),
29         Parameter(str, "Request hash")
30         ]
31
32     returns = [GeniRecord]
33     
34     def call(self, cred, hrn, request_hash, caller_cred=None):
35         
36         self.api.auth.authenticateCred(cred, [cred, hrn], request_hash) 
37         self.api.auth.check(cred, 'resolve')
38         if caller_cred==None:
39             caller_cred=cred
40
41         #log the call
42         self.api.logger.info("interface: %s\tcaller-hrn: %s\ttarget-hrn: %s\tmethod-name: %s"%(self.api.interface, Credential(string=caller_cred).get_gid_caller().get_hrn(), hrn, self.name))
43         good_records = [] 
44
45         # load all know registry names into a prefix tree and attempt to find
46         # the longest matching prefix
47         registries = Registries(self.api)
48         hrns = registries.keys()
49         tree = prefixTree()
50         tree.load(hrns)
51         registry_hrn = tree.best_match(hrn)
52
53         #if there was no match then this record belongs to an unknow registry
54         if not registry_hrn:
55             raise MissingAuthority(hrn)
56
57         # if the best match (longest matching hrn) is not the local registry,
58         # forward the request
59         if registry_hrn != self.api.hrn:
60             credential = self.api.getCredential()
61             try:
62                 records = registries[registry_hrn].resolve(credential, hrn, caller_cred=caller_cred)
63                 good_records = [record.as_dict() for record in records]
64                 if good_records:
65                     return good_records
66             except:
67                 traceback.print_exc()
68
69         # if we still havnt found the record yet, try the local registry
70         table = GeniTable()
71         records = table.findObjects(hrn)
72         if not records:
73             raise RecordNotFound(hrn) 
74         for record in records:
75             try:
76                 self.api.fill_record_info(record)
77                 good_records.append(dict(record))
78             except PlanetLabRecordDoesNotExist:
79                 # silently drop the ones that are missing in PL
80                 print >> log, "ignoring geni record ", record['hrn'], \
81                               " because pl record does not exist"
82                 table.remove(record)
83
84
85         return good_records    
86