request approve, request reject, ls approvals

Author: twratl

CHANGELOG.md

@@ -2,18 +2,21 @@
 
 All changes to the package starting with v0.3.1 will be logged here.
 
-## v1.3.1 [2023-04-XX]
+## v1.4.0 [2023-04-XX]
 #### What's New
-* None
+* Command `request approve`
+* Command `request reject`
+* Command `ls approvals`
 
 #### Enhancements
 * None
 
 #### Bug Fixes
-* Resolved issue with profile alias names which included uppercase and special characters
+* Resolved issue with profile alias names which included uppercase and special characters.
+* Resolved an issue with `checkout --mode browser-*` that was not actually launching the browser.
 
 #### Dependencies
-* None
+* `britive>=2.19.0`
 
 #### Other
 * None

src/pybritive/britive_cli.py

@@ -205,6 +205,26 @@ def list_secrets(self):
         self.login()
         self.print(self.b.my_secrets.list(), ignore_silent=True)
 
+    def list_approvals(self):
+        self.login()
+        approvals = []
+        for approval in self.b.my_access.list_approvals():
+            approval.pop('resource', None)
+            approval.pop('consumer', None)
+            approval.pop('timeToApprove', None)
+            approval.pop('validFor', None)
+            approval.pop('action', None)
+            approval.pop('approvers', None)
+            approval.pop('expirationTimeApproval', None)
+            approval.pop('updatedAt', None)
+            approval.pop('actionBy', None)
+            approval.pop('validForInDays', None)
+            approvals.append(approval)
+
+        approvals = sorted(approvals, key=lambda x: x['createdAt'])
+        approvals.reverse()
+        self.print(approvals, ignore_silent=True)
+
     def list_profiles(self, checked_out: bool = False):
         self.login()
         self._set_available_profiles()
@@ -1003,4 +1023,10 @@ def aws_console(profile, duration, browser):
         browser = webbrowser.get(using=browser)
         browser.open(console_url)
 
+    def request_disposition(self, request_id, decision):
+        self.login()
 
+        if decision == 'approve':
+            self.b.my_access.approve_request(request_id=request_id)
+        if decision == 'reject':
+            self.b.my_access.reject_request(request_id=request_id)

src/pybritive/commands/ls.py

@@ -41,4 +41,9 @@ def secrets(ctx, output_format, tenant, token, silent, passphrase, federation_pr
     ctx.obj.britive.list_secrets()
 
 
-
+@ls.command()
+@build_britive
+@britive_options(names='format,tenant,token,silent,passphrase,federation_provider')
+def approvals(ctx, output_format, tenant, token, silent, passphrase, federation_provider):
+    """List approvals for the currently authenticated identity."""
+    ctx.obj.britive.list_approvals()

src/pybritive/commands/request.py

@@ -47,3 +47,34 @@ def withdraw(ctx, tenant, token, silent, passphrase, federation_provider, profil
     ctx.obj.britive.request_withdraw(
         profile=profile
     )
+
+
+@request.command()
+@build_britive
+@britive_options(names='tenant,token,silent,passphrase,federation_provider')
+@click.argument('request-id')
+def approve(ctx, tenant, token, silent, passphrase, federation_provider, request_id):
+    """Approve a request to checkout a profile.
+
+    This command takes 1 required argument `request-id`. Find the `request-id` via `ls approvals`.
+    """
+
+    ctx.obj.britive.request_disposition(
+        request_id=request_id,
+        decision='approve'
+    )
+
+@request.command()
+@build_britive
+@britive_options(names='tenant,token,silent,passphrase,federation_provider')
+@click.argument('request-id')
+def reject(ctx, tenant, token, silent, passphrase, federation_provider, request_id):
+    """Reject a request to checkout a profile.
+
+    This command takes 1 required argument `request-id`. Find the `request-id` via `ls approvals`.
+    """
+
+    ctx.obj.britive.request_disposition(
+        request_id=request_id,
+        decision='reject'
+    )