Add license upload step to the setup flow

Fixes #853

endpoints/api/suconfig.py

@@ -6,7 +6,8 @@ import signal
 
 from flask import abort
 from endpoints.api import (ApiResource, nickname, resource, internal_only, show_if,
-                           require_fresh_login, request, validate_json_request, verify_not_prod)
+                           require_fresh_login, request, validate_json_request, verify_not_prod,
+                           InvalidRequest)
 
 from endpoints.common import common_login
 from app import app, config_provider, superusers, OVERRIDE_CONFIG_DIRECTORY
@@ -18,6 +19,7 @@ from data.database import User
 from util.config.configutil import add_enterprise_config_defaults
 from util.config.database import sync_database_with_config
 from util.config.validator import validate_service_for_config, CONFIG_FILENAMES
+from util.config.provider.license import decode_license, LicenseError
 from data.runmigration import run_alembic_migration
 from data.users import get_federated_service_name, get_users_handler
 
@@ -62,6 +64,12 @@ class SuperUserRegistryStatus(ApiResource):
         'status': 'missing-config-dir'
       }
 
+    # If there is no license file, we need to ask the user to upload it.
+    if not config_provider.has_license_file():
+      return {
+        'status': 'upload-license'
+      }
+
     # If there is no config file, we need to setup the database.
     if not config_provider.config_exists():
       return {
@@ -244,6 +252,50 @@ class SuperUserConfig(ApiResource):
     abort(403)
 
 
+@resource('/v1/superuser/config/license')
+@internal_only
+@show_if(features.SUPER_USERS)
+class SuperUserSetAndValidateLicense(ApiResource):
+  """ Resource for setting and validating a license. """
+  schemas = {
+    'ValidateLicense': {
+      'type': 'object',
+      'description': 'Validates and sets a license',
+      'required': [
+        'license',
+      ],
+      'properties': {
+        'license': {
+          'type': 'string'
+        },
+      },
+    },
+  }
+
+  @nickname('suSetAndValidateLicense')
+  @verify_not_prod
+  @validate_json_request('ValidateLicense')
+  def post(self):
+    """ Validates the given license contents and then saves it to the config volume. """
+    if config_provider.has_license_file():
+      abort(403)
+
+    license_contents = request.get_json()['license']
+    try:
+      decoded_license = decode_license(license_contents)
+    except LicenseError as le:
+      raise InvalidRequest(le.message)
+
+    if decoded_license.is_expired:
+      raise InvalidRequest('License has expired')
+
+    config_provider.save_license(license_contents)
+    return {
+      'decoded': decoded_license.subscription,
+      'success': True
+    }
+
+
 @resource('/v1/superuser/config/file/<filename>')
 @internal_only
 @show_if(features.SUPER_USERS)