service key server wip

data/model/service_keys.py

@@ -0,0 +1,44 @@
+from datetime import datetime
+
+from data.model import ServiceKeyDoesNotExist
+from data.database import ServiceKey
+
+def _gc_expired(service):
+  ServiceKey.delete().where(ServiceKey.service == service,
+                            ServiceKey.expiration_date <= datetime.now).execute()
+
+
+def upsert_service_key(kid, service, jwk, expiration_date):
+  _gc_expired(service)
+
+  try:
+    key = ServiceKey.select().where(ServiceKey.kid == kid).get()
+    key.service = service
+    key.jwk = jwk
+    key.expiration_date = expiration_date
+    key.save()
+  except ServiceKey.DoesNotExist:
+    ServiceKey.create(kid=kid, service=service, jwk=jwk, expiration_date=expiration_date)
+
+
+def get_service_keys(service, kid=None):
+  _gc_expired(service)
+
+  try:
+    query = ServiceKey.select().where(ServiceKey.service == service,
+                                      ~(ServiceKey.approval >> None))
+    if kid:
+      query.where(ServiceKey.kid == kid)
+    return query
+  except ServiceKey.DoesNotExist:
+    raise ServiceKeyDoesNotExist()
+
+
+def delete_service_key(service, kid):
+  _gc_expired(service)
+
+  try:
+    ServiceKey.delete().where(ServiceKey.service == service,
+                              ServiceKey.kid == kid).execute()
+  except ServiceKey.DoesNotExist:
+    raise ServiceKeyDoesNotExist()