Class: Sailpoint::Rest

Inherits:
Object show all
Defined in:
lib/sailpoint/rest.rb

Overview

Used for created REST API calls to the organizations IdentityIQ source

Constant Summary collapse

EMPTY_RESPONSE = 
'{}'
EMPTY_HASH = 
{}.freeze

Class Method Summary collapse

Class Method Details

.authenticate ⇒ Hash

Used to verify if the supplied credentials are valid

Returns:

  • (Hash) —

    • The responses body as a JSON hash



15
16
17
18
19
20
21
 
# File 'lib/sailpoint/rest.rb', line 15

def self.authenticate
  set_rest_interface
  response = HTTParty.get([Sailpoint.config.url, 'authentication'].join('/'),
                          headers: Sailpoint.config.auth_header,
                          output: 'json', timeout: 10)
  JSON.parse(response)
end

.check_roles(identity, roles) ⇒ Hash

Verify if the user has any policies set within the specified roles

Parameters:

  • identity (String) —

    • The user in which you are requesting data for

  • roles (String, Array) —

    • Roles specified to validate against (either: role or ['role1','role2'])

Returns:

  • (Hash) —

    • Return data associated with there users roles



27
28
29
30
31
32
33
34
35
36
37
38
39
 
# File 'lib/sailpoint/rest.rb', line 27

def self.check_roles(identity, roles)
  # Values for both attributes are required in order to create the request
  # And verify the user exists before attempting to create the request (this prevents IdentityIQ from making a long last query looking for a non-existant user)
  return EMPTY_HASH if identity.blank? || roles.blank? || get_user(identity).empty?

  set_rest_interface
  # the roles attribute should either be 'Contractor,Assistant' or ['Contractor', 'Assistant']
  roles = roles.join(',') if roles.is_a?(Array)
  response = HTTParty.get([Sailpoint.config.url, "policies/checkRolePolicies?identity=#{identity&.escape_str}&roles=#{roles}"].join('/'),
                          headers: Sailpoint.config.auth_header,
                          output: 'json', timeout: 10)
  JSON.parse(response&.body || EMPTY_RESPONSE)
end

.get_identity(identity) ⇒ Hash

Used to fetch the specified user identiy from the REST API interface

Parameters:

  • identity (String) —

    • The user in which you are requesting data for

Returns:

  • (Hash) —

    • If no user if found an empty hash will be returned. If a a user is found, their parsed JSON will be returned as a result



44
45
46
47
48
49
50
51
52
 
# File 'lib/sailpoint/rest.rb', line 44

def self.get_identity(identity)
  set_rest_interface
  response = HTTParty.get([Sailpoint.config.url, 'identities', identity&.escape_str, 'managedIdentities'].join('/'),
                          headers: Sailpoint.config.auth_header,
                          output: 'json', timeout: 10)
  return [].freeze if response.code == '500'

  JSON.parse(response&.body || EMPTY_RESPONSE).first
end

.get_user(identity) ⇒ Hash

Used to fetch the specified users associated data

Parameters:

  • identity (String) —

    • The user in which you are requesting data for

Returns:

  • (Hash) —

    • If no user if found an empty hash will be returned. If a a user is found, their parsed JSON will be returned as a result

Raises:



57
58
59
60
61
62
63
64
65
 
# File 'lib/sailpoint/rest.rb', line 57

def self.get_user(identity)
  set_rest_interface
  response = HTTParty.get([Sailpoint.config.url, 'identities', identity&.escape_str].join('/'),
                          headers: Sailpoint.config.auth_header,
                          output: 'json', timeout: 10)
  raise Sailpoint::Helpers::AuthenticationException, 'Invalid credentials, please try again.' if response.code == 401

  JSON.parse(response&.body || EMPTY_RESPONSE)
end

.permitted_roles(identity = '') ⇒ Hash

Get a users roles within the Organization

Returns:

  • (Hash) —

    • The users roles associated within the Organization



69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
 
# File 'lib/sailpoint/rest.rb', line 69

def self.permitted_roles(identity = '')
  # Before requesting a users roles we need to verify if the identiy matches a valid user first
  return EMPTY_HASH if identity.blank? || get_user(identity).blank?

  set_rest_interface
  response = HTTParty.get([Sailpoint.config.url, "roles/assignablePermits/?roleMode=assignable&identity=#{identity&.escape_str}"].join('/'),
                          headers: Sailpoint.config.auth_header,
                          output: 'json', timeout: 10)
  response_body = JSON.parse(response&.body || EMPTY_RESPONSE)
  return response_body['objects'].map { |role| role['name'] } if response['status'].present? && response['status'] == 'success'

  response_body
rescue
  EMPTY_HASH
end

.ping ⇒ Hash

Used to verify your credentials are valid and IdentityIQ reource is properly responding

Returns:

  • (Hash) —

    • The head and body of the response



87
88
89
90
91
92
93
94
 
# File 'lib/sailpoint/rest.rb', line 87

def self.ping
  set_rest_interface
  HTTParty.get([Sailpoint.config.url, 'ping'].join('/'),
               headers: Sailpoint.config.auth_header,
               output: 'json', timeout: 10)
rescue
  false
end