split cloud_auth into gcp and azure

Author: mansona

src/cloud_auth.ts renamed to src/azure_auth.ts

@@ -18,12 +18,12 @@ interface Config {
     ['expiry-key']: string;
     ['access-token']?: string;
 }
-export class CloudAuth implements Authenticator {
+export class AzureAuth implements Authenticator {
     public isAuthProvider(user: User): boolean {
         if (!user || !user.authProvider) {
             return false;
         }
-        return user.authProvider.name === 'azure' || user.authProvider.name === 'gcp';
+        return user.authProvider.name === 'azure';
     }
 
     public async applyAuthentication(

src/config.ts

@@ -10,7 +10,7 @@ import shelljs = require('shelljs');
 
 import * as api from './api';
 import { Authenticator } from './auth';
-import { CloudAuth } from './cloud_auth';
+import { AzureAuth } from './azure_auth';
 import {
     Cluster,
     ConfigOptions,
@@ -25,6 +25,7 @@ import {
 } from './config_types';
 import { ExecAuth } from './exec_auth';
 import { FileAuth } from './file_auth';
+import { GoogleCloudPlatformAuth } from './gcp_auth';
 import { OpenIDConnectAuth } from './oidc_auth';
 
 // fs.existsSync was removed in node 10
@@ -39,7 +40,8 @@ function fileExists(filepath: string): boolean {
 
 export class KubeConfig {
     private static authenticators: Authenticator[] = [
-        new CloudAuth(),
+        new AzureAuth(),
+        new GoogleCloudPlatformAuth(),
         new ExecAuth(),
         new FileAuth(),
         new OpenIDConnectAuth(),

src/gcp_auth.ts

@@ -0,0 +1,96 @@
+import * as proc from 'child_process';
+import https = require('https');
+import * as jsonpath from 'jsonpath-plus';
+import request = require('request');
+
+import { Authenticator } from './auth';
+import { User } from './config_types';
+
+/* FIXME: maybe we can extend the User and User.authProvider type to have a proper type.
+Currently user.authProvider has `any` type and so we don't have a type for user.authProvider.config.
+We therefore define its type here
+*/
+interface Config {
+    expiry: string;
+    ['cmd-args']?: string;
+    ['cmd-path']?: string;
+    ['token-key']: string;
+    ['expiry-key']: string;
+    ['access-token']?: string;
+}
+export class GoogleCloudPlatformAuth implements Authenticator {
+    public isAuthProvider(user: User): boolean {
+        if (!user || !user.authProvider) {
+            return false;
+        }
+        return user.authProvider.name === 'gcp';
+    }
+
+    public async applyAuthentication(
+        user: User,
+        opts: request.Options | https.RequestOptions,
+    ): Promise<void> {
+        const token = this.getToken(user);
+        if (token) {
+            opts.headers!.Authorization = `Bearer ${token}`;
+        }
+    }
+
+    private getToken(user: User): string | null {
+        const config = user.authProvider.config;
+        if (this.isExpired(config)) {
+            this.updateAccessToken(config);
+        }
+        return config['access-token'];
+    }
+
+    private isExpired(config: Config): boolean {
+        const token = config['access-token'];
+        const expiry = config.expiry;
+        if (!token) {
+            return true;
+        }
+        if (!expiry) {
+            return false;
+        }
+
+        const expiration = Date.parse(expiry);
+        if (expiration < Date.now()) {
+            return true;
+        }
+        return false;
+    }
+
+    private updateAccessToken(config: Config): void {
+        let cmd = config['cmd-path'];
+        if (!cmd) {
+            throw new Error('Token is expired!');
+        }
+        // Wrap cmd in quotes to make it cope with spaces in path
+        cmd = `"${cmd}"`;
+        const args = config['cmd-args'];
+        if (args) {
+            cmd = cmd + ' ' + args;
+        }
+        // TODO: Cache to file?
+        // TODO: do this asynchronously
+        let output: any;
+        try {
+            output = proc.execSync(cmd);
+        } catch (err) {
+            throw new Error('Failed to refresh token: ' + err.message);
+        }
+
+        const resultObj = JSON.parse(output);
+
+        const tokenPathKeyInConfig = config['token-key'];
+        const expiryPathKeyInConfig = config['expiry-key'];
+
+        // Format in file is {<query>}, so slice it out and add '$'
+        const tokenPathKey = '$' + tokenPathKeyInConfig.slice(1, -1);
+        const expiryPathKey = '$' + expiryPathKeyInConfig.slice(1, -1);
+
+        config['access-token'] = jsonpath.JSONPath(tokenPathKey, resultObj);
+        config.expiry = jsonpath.JSONPath(expiryPathKey, resultObj);
+    }
+}