|
14 | 14 |
|
15 | 15 | import os |
16 | 16 |
|
17 | | -from typing_extensions import override |
18 | | - |
19 | | -from veadk.auth.veauth.base_veauth import BaseVeAuth |
| 17 | +from veadk.auth.veauth.utils import get_credential_from_vefaas_iam |
20 | 18 | from veadk.utils.logger import get_logger |
21 | 19 | from veadk.utils.volcengine_sign import ve_request |
22 | 20 |
|
23 | 21 | logger = get_logger(__name__) |
24 | 22 |
|
25 | 23 |
|
26 | | -class ARKVeAuth(BaseVeAuth): |
27 | | - def __init__( |
28 | | - self, |
29 | | - access_key: str = os.getenv("VOLCENGINE_ACCESS_KEY", ""), |
30 | | - secret_key: str = os.getenv("VOLCENGINE_SECRET_KEY", ""), |
31 | | - ) -> None: |
32 | | - super().__init__(access_key, secret_key) |
| 24 | +def get_ark_token(region: str = "cn-beijing") -> str: |
| 25 | + logger.info("Fetching ARK token...") |
33 | 26 |
|
34 | | - self._token: str = "" |
| 27 | + access_key = os.getenv("VOLCENGINE_ACCESS_KEY") |
| 28 | + secret_key = os.getenv("VOLCENGINE_SECRET_KEY") |
| 29 | + session_token = "" |
35 | 30 |
|
36 | | - @override |
37 | | - def _fetch_token(self) -> None: |
38 | | - logger.info("Fetching ARK token...") |
39 | | - # list api keys |
40 | | - first_api_key_id = "" |
41 | | - res = ve_request( |
42 | | - request_body={"ProjectName": "default", "Filter": {}}, |
43 | | - action="ListApiKeys", |
44 | | - ak=self.access_key, |
45 | | - sk=self.secret_key, |
46 | | - service="ark", |
47 | | - version="2024-01-01", |
48 | | - region="cn-beijing", |
49 | | - host="open.volcengineapi.com", |
50 | | - ) |
51 | | - try: |
52 | | - first_api_key_id = res["Result"]["Items"][0]["Id"] |
53 | | - except KeyError: |
54 | | - raise ValueError(f"Failed to get ARK api key list: {res}") |
| 31 | + if not (access_key and secret_key): |
| 32 | + # try to get from vefaas iam |
| 33 | + cred = get_credential_from_vefaas_iam() |
| 34 | + access_key = cred.access_key_id |
| 35 | + secret_key = cred.secret_access_key |
| 36 | + session_token = cred.session_token |
55 | 37 |
|
56 | | - # get raw api key |
57 | | - res = ve_request( |
58 | | - request_body={"Id": first_api_key_id}, |
59 | | - action="GetRawApiKey", |
60 | | - ak=self.access_key, |
61 | | - sk=self.secret_key, |
62 | | - service="ark", |
63 | | - version="2024-01-01", |
64 | | - region="cn-beijing", |
65 | | - host="open.volcengineapi.com", |
66 | | - ) |
67 | | - try: |
68 | | - self._token = res["Result"]["ApiKey"] |
69 | | - except KeyError: |
70 | | - raise ValueError(f"Failed to get ARK api key: {res}") |
| 38 | + res = ve_request( |
| 39 | + request_body={"ProjectName": "default", "Filter": {}}, |
| 40 | + header={"X-Security-Token": session_token}, |
| 41 | + action="ListApiKeys", |
| 42 | + ak=access_key, |
| 43 | + sk=secret_key, |
| 44 | + service="ark", |
| 45 | + version="2024-01-01", |
| 46 | + region=region, |
| 47 | + host="open.volcengineapi.com", |
| 48 | + ) |
| 49 | + try: |
| 50 | + first_api_key_id = res["Result"]["Items"][0]["Id"] |
| 51 | + except KeyError: |
| 52 | + raise ValueError(f"Failed to get ARK api key list: {res}") |
71 | 53 |
|
72 | | - @property |
73 | | - def token(self) -> str: |
74 | | - if self._token: |
75 | | - return self._token |
76 | | - self._fetch_token() |
77 | | - return self._token |
| 54 | + # get raw api key |
| 55 | + res = ve_request( |
| 56 | + request_body={"Id": first_api_key_id}, |
| 57 | + header={"X-Security-Token": session_token}, |
| 58 | + action="GetRawApiKey", |
| 59 | + ak=access_key, |
| 60 | + sk=secret_key, |
| 61 | + service="ark", |
| 62 | + version="2024-01-01", |
| 63 | + region=region, |
| 64 | + host="open.volcengineapi.com", |
| 65 | + ) |
| 66 | + try: |
| 67 | + return res["Result"]["ApiKey"] |
| 68 | + except KeyError: |
| 69 | + raise ValueError(f"Failed to get ARK api key: {res}") |
0 commit comments