How can we use authorization in foreman Rest API In Ruby

tarunagarwal · April 9, 2018, 11:34am

I am Implementing foreman rest api in ruby, where i need to authenticate every api, for which i am using basic auth, and it is working fine.

But i need authentication via consumer key & consumer secret

My code is

uri = URI.parse("https://192.168.21.2/api/hosts.json")
host_param = {host: {architecture_id: 1, build: "false", domain_id: 1, enabled: "true", environment_id: 1, hostgroup_id: 1, mac: "ec:b1:d7:50:40:e9", medium_id: 9,model_id: 1, name: "r8sysdpl010.localdomain", operatingsystem_id: 1, owner_id: 3, owner_type:"User", ptable_id: 120, puppet_status: "0"}}
header = {'Content-Type' => 'application/json'}
http = Net::HTTP.new(uri.host, uri.port)
http.use_ssl = true
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
request = Net::HTTP::Post.new(uri.path, header)
request.basic_auth("admin", "masked")
request.body = host_param.to_json
response = http.request(request)
if response.code == "301"
  response =  Net::HTTP.get_response(URI.parse(response.header['location']))
end
@response = response.body

thomasmckay · April 9, 2018, 12:29pm

Do you mean the consumer info from a host registered with
subscription-manager?

Here’s the code that passes that info on to candlepin calls, if it helps.

github.com

Katello/katello/blob/master/app/lib/katello/resources/candlepin.rb#L6


module Katello
module Resources
  module Candlepin
    TOTAL_COUNT_HEADER = :x_total_count # as parsed by rest_client


    class CandlepinResource < HttpResource
      cfg = SETTINGS[:katello][:candlepin]
      url = cfg[:url]
      uri = URI.parse(url)
      self.prefix = uri.path
      self.site = "#{uri.scheme}://#{uri.host}:#{uri.port}"
      self.consumer_secret = cfg[:oauth_secret]
      self.consumer_key = cfg[:oauth_key]
      self.ca_cert_file = cfg[:ca_cert_file]


      class << self

ekohl · April 9, 2018, 12:49pm

If you mean just Foreman, then we have some helpers here that could serve as inspiration.

github.com

theforeman/puppet-foreman/blob/master/lib/puppet/provider/foreman_resource/rest_v3.rb

# Base provider for other Puppet types managing Foreman resources
#
# This provider uses Net::HTTP from Ruby stdlib, JSON (stdlib on 1.9+ or the
# gem on 1.8) and the oauth gem for auth, so requiring minimal dependencies.

require 'uri'

Puppet::Type.type(:foreman_resource).provide(:rest_v3) do
  # when previous providers are installed, use this one
  def self.specificity
    super + 2
  end

  def oauth_consumer_key
    @oauth_consumer_key ||= begin
      if resource[:consumer_key]
        resource[:consumer_key]
      else
        begin
          YAML.load_file('/etc/foreman/settings.yaml')[:oauth_consumer_key]

This file has been truncated. show original

I’m sure apipie-bindings could also provide you with oauth but I don’t see a simple example.

tarunagarwal · April 10, 2018, 4:09am

No, actually i mean to say, i want call this API “https://192.168.21.2/api/hosts.json”
with consumer key and consumer secret in authorization header

But i did not see anything on internet regarding authentication of this rest API with key and secret,

tarunagarwal · April 10, 2018, 4:12am

equest.basic_auth(“admin”, “masked”)

No, actually i mean to say, i want call this API “https://192.168.21.2/api/hosts.json”
with consumer key and consumer secret in authorization header

But i did not see anything on internet regarding authentication of this rest API with key and secret,

tarunagarwal · April 10, 2018, 4:25am

Thank thomas for your reply,

But actually i need Authorization header with this API call, i don’t want do with basic ouath.