fetch_token

#!/usr/bin/env python
"""Fetch a JWT from the Auth0 service acc. to the variables of the .env file.

Overwrite single variables using the respective command line options, or by specifying
another .env file to load.
"""

import argparse
import logging
import os
import sys
from pathlib import Path

SCRIPT_DIRPATH = Path(__file__).resolve().parent
TEST_DATA_DIRPATH = SCRIPT_DIRPATH / "test"
sys.path.insert(0, str(TEST_DATA_DIRPATH))
from auth import TEST_AUTH0_PASSWORD, TEST_AUTH0_USERNAME  # type: ignore
from boxtribute_server.auth import request_jwt  # type: ignore
from dotenv import load_dotenv

logger = logging.getLogger(__name__)
logger.addHandler(logging.StreamHandler())


def _create_cli_parser():
    parser = argparse.ArgumentParser(description=globals()["__doc__"])
    parser.add_argument("-u", "--username")
    parser.add_argument("-p", "--password")
    parser.add_argument("-d", "--dotenv-filepath")
    parser.add_argument(
        "-v", "--verbose", action="store_true", help="show env variables"
    )
    parser.add_argument(
        "-t",
        "--test",
        action="store_true",
        help="fetch JWT for test user, ignoring -u and -p options",
    )
    parser.add_argument(
        "-m", "--management-api", action="store_true", help="fetch management API token"
    )
    return parser


def main():
    parser = _create_cli_parser()
    options = parser.parse_args()

    if (
        options.username is None
        and options.password is None
        and options.dotenv_filepath is None
        and not options.test
        and not options.management_api
    ):
        # Exit with help message if no CLI arguments passed
        parser.print_help()
        raise SystemExit(0)

    if options.verbose:
        logger.setLevel(logging.DEBUG)

    if options.dotenv_filepath is not None:
        load_dotenv(options.dotenv_filepath, override=True)

    for k, v in sorted(os.environ.items()):
        if "AUTH0" in k:
            logger.debug(f"{k}={v}")

    parameters = dict(
        audience=os.environ["AUTH0_AUDIENCE"],
        domain=os.environ["AUTH0_DOMAIN"],
    )
    if options.test:
        extras = dict(
            client_id=os.environ["TEST_AUTH0_CLIENT_ID"],
            client_secret=os.environ["TEST_AUTH0_CLIENT_SECRET"],
            username=TEST_AUTH0_USERNAME,
            password=TEST_AUTH0_PASSWORD,
        )
    elif options.management_api:
        extras = dict(
            client_id=os.environ["AUTH0_MANAGEMENT_API_CLIENT_ID"],
            client_secret=os.environ["AUTH0_MANAGEMENT_API_CLIENT_SECRET"],
            audience=os.environ["AUTH0_MANAGEMENT_API_AUDIENCE"],
            grant_type="client_credentials",
            username=None,
            password=None,
        )
    else:
        extras = dict(
            client_id=os.environ["AUTH0_CLIENT_ID"],
            client_secret=os.environ["AUTH0_CLIENT_SECRET"],
            username=options.username or os.environ["AUTH0_USERNAME"],
            password=options.password or os.environ["AUTH0_PASSWORD"],
        )
    parameters.update(extras)

    success, result = request_jwt(**parameters)

    if not success:
        raise SystemExit(result)
    return result["access_token"]


if __name__ == "__main__":
    print(main())