Add superuser config section for updating license

endpoints/api/superuser.py

@@ -18,11 +18,12 @@ from auth.permissions import SuperUserPermission
 from endpoints.api import (ApiResource, nickname, resource, validate_json_request,
                            internal_only, require_scope, show_if, parse_args,
                            query_param, abort, require_fresh_login, path_param, verify_not_prod,
-                           page_support, log_action)
+                           page_support, log_action, InvalidRequest)
 from endpoints.api.logs import get_logs, get_aggregate_logs
 from data import model
 from data.database import ServiceKeyApprovalType
 from util.useremails import send_confirmation_email, send_recovery_email
+from util.license import decode_license, LicenseError
 
 
 logger = logging.getLogger(__name__)
@@ -819,3 +820,143 @@ class SuperUserServiceKeyApproval(ApiResource):
       return make_response('', 201)
 
     abort(403)
+
+
+@resource('/v1/superuser/license')
+@internal_only
+@show_if(features.SUPER_USERS)
+class SuperUserLicense(ApiResource):
+  """ Resource for getting and setting a license. """
+  schemas = {
+    'UpdateLicense': {
+      'type': 'object',
+      'description': 'Updates a license',
+      'required': [
+        'license',
+      ],
+      'properties': {
+        'license': {
+          'type': 'string'
+        },
+      },
+    },
+  }
+
+  @nickname('getLicense')
+  @require_fresh_login
+  @require_scope(scopes.SUPERUSER)
+  @verify_not_prod
+  def get(self):
+    """ Returns the current decoded license. """
+    if SuperUserPermission().can():
+      try:
+        decoded_license = config_provider.get_license()
+      except LicenseError as le:
+        raise InvalidRequest(le.message)
+
+      if decoded_license.is_expired:
+        raise InvalidRequest('License has expired')
+
+      return {
+        'decoded': decoded_license.subscription,
+        'success': True
+      }
+
+    abort(403)
+
+  @nickname('updateLicense')
+  @require_fresh_login
+  @require_scope(scopes.SUPERUSER)
+  @verify_not_prod
+  @validate_json_request('UpdateLicense')
+  def put(self):
+    """ Validates the given license contents and then saves it to the config volume. """
+    if SuperUserPermission().can():
+      license_contents = request.get_json()['license']
+      try:
+        decoded_license = decode_license(license_contents)
+      except LicenseError as le:
+        raise InvalidRequest(le.message)
+
+      if decoded_license.is_expired:
+        raise InvalidRequest('License has expired')
+
+      config_provider.save_license(license_contents)
+      return {
+        'decoded': decoded_license.subscription,
+        'success': True
+      }
+
+    abort(403)
+
+
+@resource('/v1/messages')
+@show_if(features.SUPER_USERS)
+class SuperUserMessages(ApiResource):
+  """ Resource for getting a list of super user messages """
+
+  schemas = {
+    'GetMessage': {
+      'id': 'GetMessage',
+      'type': 'object',
+      'description': 'Messages that a super user has saved in the past',
+      'properties': {
+        'message': {
+          'type': 'array',
+          'description': 'A list of messages',
+          'itemType': {
+            'type': 'object',
+            'properties': {
+              'id': {
+                'type': 'integer',
+                'description': 'The message id',
+              },
+              'content': {
+                'type': 'string',
+                'description': 'The actual message',
+              },
+            },
+          },
+        },
+      },
+    },
+    'CreateMessage': {
+      'id': 'CreateMessage',
+      'type': 'object',
+      'description': 'Create a new message',
+      'properties': {
+        'message': {
+          'type': 'object',
+          'description': 'A single message',
+          'properties': {
+            'content': {
+              'type': 'string',
+              'description': 'The actual message',
+            },
+          },
+        },
+      },
+    }
+  }
+
+  @nickname('getMessages')
+  def get(self):
+    """ Return a super users messages """
+    return {
+      'messages': [message_view(m) for m in model.message.get_messages()],
+    }
+
+  @verify_not_prod
+  @nickname('createMessages')
+  @validate_json_request('CreateMessage')
+  @require_scope(scopes.SUPERUSER)
+  def post(self):
+    """ Create a message """
+    if SuperUserPermission().can():
+      model.message.create([request.get_json()['message']])
+      return make_response('', 201)
+    abort(403)
+
+
+def message_view(message):
+  return {'id': message.id, 'content': message.content}