+ # This file is automatically @generated by Poetry 1.8.5 and should not be changed by hand.

+ version = "43.0.3"

+ python-versions = ">=3.7"

+ files = [

+     {file = "cryptography-43.0.3-cp37-abi3-macosx_10_9_universal2.whl", hash = "sha256:bf7a1932ac4176486eab36a19ed4c0492da5d97123f1406cf15e41b05e787d2e"},

+     {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:63efa177ff54aec6e1c0aefaa1a241232dcd37413835a9b674b6e3f0ae2bfd3e"},

+     {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:7e1ce50266f4f70bf41a2c6dc4358afadae90e2a1e5342d3c08883df1675374f"},

+     {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:443c4a81bb10daed9a8f334365fe52542771f25aedaf889fd323a853ce7377d6"},

+     {file = "cryptography-43.0.3-cp37-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:74f57f24754fe349223792466a709f8e0c093205ff0dca557af51072ff47ab18"},

+     {file = "cryptography-43.0.3-cp37-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:9762ea51a8fc2a88b70cf2995e5675b38d93bf36bd67d91721c309df184f49bd"},

+     {file = "cryptography-43.0.3-cp37-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:81ef806b1fef6b06dcebad789f988d3b37ccaee225695cf3e07648eee0fc6b73"},

+     {file = "cryptography-43.0.3-cp37-abi3-win32.whl", hash = "sha256:cbeb489927bd7af4aa98d4b261af9a5bc025bd87f0e3547e11584be9e9427be2"},

+     {file = "cryptography-43.0.3-cp37-abi3-win_amd64.whl", hash = "sha256:f46304d6f0c6ab8e52770addfa2fc41e6629495548862279641972b6215451cd"},

+     {file = "cryptography-43.0.3-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:8ac43ae87929a5982f5948ceda07001ee5e83227fd69cf55b109144938d96984"},

+     {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:846da004a5804145a5f441b8530b4bf35afbf7da70f82409f151695b127213d5"},

+     {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:0f996e7268af62598f2fc1204afa98a3b5712313a55c4c9d434aef49cadc91d4"},

+     {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:f7b178f11ed3664fd0e995a47ed2b5ff0a12d893e41dd0494f406d1cf555cab7"},

+     {file = "cryptography-43.0.3-cp39-abi3-manylinux_2_28_x86_64.whl", hash = "sha256:c2e6fc39c4ab499049df3bdf567f768a723a5e8464816e8f009f121a5a9f4405"},

+     {file = "cryptography-43.0.3-cp39-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:e1be4655c7ef6e1bbe6b5d0403526601323420bcf414598955968c9ef3eb7d16"},

+     {file = "cryptography-43.0.3-cp39-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:df6b6c6d742395dd77a23ea3728ab62f98379eff8fb61be2744d4679ab678f73"},

+     {file = "cryptography-43.0.3-cp39-abi3-win32.whl", hash = "sha256:d56e96520b1020449bbace2b78b603442e7e378a9b3bd68de65c782db1507995"},

+     {file = "cryptography-43.0.3-cp39-abi3-win_amd64.whl", hash = "sha256:0c580952eef9bf68c4747774cde7ec1d85a6e61de97281f2dba83c7d2c806362"},

+     {file = "cryptography-43.0.3-pp310-pypy310_pp73-macosx_10_9_x86_64.whl", hash = "sha256:d03b5621a135bffecad2c73e9f4deb1a0f977b9a8ffe6f8e002bf6c9d07b918c"},

+     {file = "cryptography-43.0.3-pp310-pypy310_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:a2a431ee15799d6db9fe80c82b055bae5a752bef645bba795e8e52687c69efe3"},

+     {file = "cryptography-43.0.3-pp310-pypy310_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:281c945d0e28c92ca5e5930664c1cefd85efe80e5c0d2bc58dd63383fda29f83"},

+     {file = "cryptography-43.0.3-pp310-pypy310_pp73-win_amd64.whl", hash = "sha256:f18c716be16bc1fea8e95def49edf46b82fccaa88587a45f8dc0ff6ab5d8e0a7"},

+     {file = "cryptography-43.0.3-pp39-pypy39_pp73-macosx_10_9_x86_64.whl", hash = "sha256:4a02ded6cd4f0a5562a8887df8b3bd14e822a90f97ac5e544c162899bc467664"},

+     {file = "cryptography-43.0.3-pp39-pypy39_pp73-manylinux_2_28_aarch64.whl", hash = "sha256:53a583b6637ab4c4e3591a15bc9db855b8d9dee9a669b550f311480acab6eb08"},

+     {file = "cryptography-43.0.3-pp39-pypy39_pp73-manylinux_2_28_x86_64.whl", hash = "sha256:1ec0bcf7e17c0c5669d881b1cd38c4972fade441b27bda1051665faaa89bdcaa"},

+     {file = "cryptography-43.0.3-pp39-pypy39_pp73-win_amd64.whl", hash = "sha256:2ce6fae5bdad59577b44e4dfed356944fbf1d925269114c28be377692643b4ff"},

+     {file = "cryptography-43.0.3.tar.gz", hash = "sha256:315b9001266a492a6ff443b61238f956b214dbec9910a081ba5b6646a055a805"},

+ docs = ["sphinx (>=5.3.0)", "sphinx-rtd-theme (>=1.1.1)"]

+ docstest = ["pyenchant (>=1.6.11)", "readme-renderer", "sphinxcontrib-spelling (>=4.0.1)"]

+ nox = ["nox"]

+ pep8test = ["check-sdist", "click", "mypy", "ruff"]

+ sdist = ["build"]

+ test = ["certifi", "cryptography-vectors (==43.0.3)", "pretend", "pytest (>=6.2.0)", "pytest-benchmark", "pytest-cov", "pytest-xdist"]

+ name = "dnspython"

+ version = "2.7.0"

+ description = "DNS toolkit"

+ optional = false

+ python-versions = ">=3.9"

+ files = [

+     {file = "dnspython-2.7.0-py3-none-any.whl", hash = "sha256:b4c34b7d10b51bcc3a5071e7b8dee77939f1e878477eeecc965e9835f63c6c86"},

+     {file = "dnspython-2.7.0.tar.gz", hash = "sha256:ce9c432eda0dc91cf618a5cedf1a4e142651196bbcd2c80e89ed5a907e5cfaf1"},

+ ]

+ 

+ [package.extras]

+ dev = ["black (>=23.1.0)", "coverage (>=7.0)", "flake8 (>=7)", "hypercorn (>=0.16.0)", "mypy (>=1.8)", "pylint (>=3)", "pytest (>=7.4)", "pytest-cov (>=4.1.0)", "quart-trio (>=0.11.0)", "sphinx (>=7.2.0)", "sphinx-rtd-theme (>=2.0.0)", "twine (>=4.0.0)", "wheel (>=0.42.0)"]

+ dnssec = ["cryptography (>=43)"]

+ doh = ["h2 (>=4.1.0)", "httpcore (>=1.0.0)", "httpx (>=0.26.0)"]

+ doq = ["aioquic (>=1.0.0)"]

+ idna = ["idna (>=3.7)"]

+ trio = ["trio (>=0.23)"]

+ wmi = ["wmi (>=1.5.1)"]

+ 

+ [[package]]

+ name = "ipaclient"

+ version = "4.12.2"

+ description = "FreeIPA client library"

+ optional = false

+ python-versions = ">=3.6.0"

+ files = [

+     {file = "ipaclient-4.12.2-py2.py3-none-any.whl", hash = "sha256:f22a02acea8426a3ebd0dbefc1491618f0ce61bc87934eed213cd35175c7b7bf"},

+ ]

+ 

+ [package.dependencies]

+ cryptography = ">=1.6"

+ ipalib = "4.12.2"

+ ipapython = "4.12.2"

+ qrcode = ">=5.0"

+ six = "*"

+ 

+ [package.extras]

+ install = ["ipaplatform"]

+ ldap = ["python-ldap"]

+ otptoken-yubikey = ["python-yubico", "pyusb"]

+ 

+ [[package]]

+ name = "ipalib"

+ version = "4.12.2"

+ description = "FreeIPA common python library"

+ optional = false

+ python-versions = ">=3.6.0"

+ files = [

+     {file = "ipalib-4.12.2-py2.py3-none-any.whl", hash = "sha256:203170ff3e17466aa192aeb7da3001326a9f101343b200daba0d0dbf4f72608c"},

+ ]

+ 

+ [package.dependencies]

+ ipaplatform = "4.12.2"

+ ipapython = "4.12.2"

+ netaddr = "*"

+ pyasn1 = "*"

+ pyasn1-modules = "*"

+ six = "*"

+ urllib3 = "*"

+ 

+ [package.extras]

+ install = ["dbus-python"]

+ 

+ [[package]]

+ name = "ipaplatform"

+ version = "4.12.2"

+ description = "FreeIPA platform"

+ optional = false

+ python-versions = ">=3.6.0"

+ files = [

+     {file = "ipaplatform-4.12.2-py2.py3-none-any.whl", hash = "sha256:3f3ab6aa30869db16c003f329a9ecb7aa10d3b63a6a44e9cc1fb71fe5b2b395a"},

+ ]

+ 

+ [package.dependencies]

+ cffi = "*"

+ ipapython = "4.12.2"

+ pyasn1 = "*"

+ six = "*"

+ 

+ [[package]]

+ name = "ipapython"

+ version = "4.12.2"

+ description = "FreeIPA python support library"

+ optional = false

+ python-versions = ">=3.6.0"

+ files = [

+     {file = "ipapython-4.12.2-py2.py3-none-any.whl", hash = "sha256:5b95f03d1c83ac0c2ec8d1cc0ca8297e2fbb69aa1d9cddec235c71f954af9e45"},

+ ]

+ 

+ [package.dependencies]

+ cffi = "*"

+ cryptography = ">=1.6"

+ dnspython = ">=1.15"

+ gssapi = ">=1.2.0"

+ ipaplatform = "4.12.2"

+ netaddr = "*"

+ six = "*"

+ 

+ [package.extras]

+ ifaddr = ["ifaddr"]

+ ldap = ["python-ldap"]

+ 

+ [[package]]

+ name = "netaddr"

+ version = "1.3.0"

+ description = "A network address manipulation library for Python"

+ optional = false

+ python-versions = ">=3.7"

+ files = [

+     {file = "netaddr-1.3.0-py3-none-any.whl", hash = "sha256:c2c6a8ebe5554ce33b7d5b3a306b71bbb373e000bbbf2350dd5213cc56e3dbbe"},

+     {file = "netaddr-1.3.0.tar.gz", hash = "sha256:5c3c3d9895b551b763779ba7db7a03487dc1f8e3b385af819af341ae9ef6e48a"},

+ ]

+ 

+ [package.extras]

+ nicer-shell = ["ipython"]

+ 

+ [[package]]

+ name = "qrcode"

+ version = "8.0"

+ description = "QR Code image generator"

+ optional = false

+ python-versions = "<4.0,>=3.9"

+ files = [

+     {file = "qrcode-8.0-py3-none-any.whl", hash = "sha256:9fc05f03305ad27a709eb742cf3097fa19e6f6f93bb9e2f039c0979190f6f1b1"},

+     {file = "qrcode-8.0.tar.gz", hash = "sha256:025ce2b150f7fe4296d116ee9bad455a6643ab4f6e7dce541613a4758cbce347"},

+ ]

+ 

+ [package.dependencies]

+ colorama = {version = "*", markers = "sys_platform == \"win32\""}

+ 

+ [package.extras]

+ all = ["pillow (>=9.1.0)", "pypng"]

+ pil = ["pillow (>=9.1.0)"]

+ png = ["pypng"]

+ 

+ [[package]]

+ content-hash = "8048917cc41a98dbe75498694aff79dc8163adc6c309cad211ffc8840b6990e9"

+ ipalib = "^4.12.2"

+ cryptography = "<44.0.0"

+ ipaclient = "^4.12.2"

+ """

+ Unit tests for `toddler.plugins.cleaning_packager_groups`

+ """

+ 

+ import logging

+ from unittest.mock import MagicMock, patch

+ 

+ import pytest

+ 

+ from toddlers.exceptions import PagureError

+ import toddlers.plugins.cleaning_packager_groups as cleaning_packager_groups

+ 

+ 

+ class TestAcceptTopic:

+     """

+     Test class for `toddler.plugins.cleaning_packager_groups.CleanPackagerGroups.accepts_topic`

+     method.

+     """

+ 

+     toddler_cls = cleaning_packager_groups.CleanPackagerGroups

+ 

+     def test_accepts_topic_invalid(self, toddler):

+         """

+         Assert that invalid topic is not accepted.

+         """

+         assert toddler.accepts_topic("foo.bar") is False

+ 

+     @pytest.mark.parametrize(

+         "topic",

+         [

+             "org.fedoraproject.*.fas.group.member.removed",

+             "org.fedoraproject.prod.fas.group.member.removed",

+             "org.fedoraproject.stg.fas.group.member.removed",

+         ],

+     )

+     def test_accepts_topic_valid(self, topic, toddler):

+         """

+         Assert that valid topics are accepted.

+         """

+         assert toddler.accepts_topic(topic)

+ 

+ 

+ class TestProcess:

+     """

+     Test class for `toddler.plugins.cleaning_packager_groups.CleanPackagerGroups.process` method

+     """

+ 

+     def setup_method(self):

+         """Initialize toddler."""

+         self.toddler_cls = cleaning_packager_groups.CleanPackagerGroups()

+         self.toddler_cls._ipa_session = MagicMock()

+ 

+     def test_process(self):

+         """

+         Assert that process is called correctly.

+         """

+         config = {"pagure": {"pagure.prod.url"}, "pagure_stg": {"pagure.stg.url"}}

+         message = MagicMock()

+         message.body = {

+             "msg": {"agent": "lenkaseg", "group": "packager", "user": "patrikp"},

+             "headers": {

+                 "fedora_messaging_group_communishift-admins": True,

+                 "fedora_messaging_schema": "noggin.group.member.sponsor.v1",

+                 "fedora_messaging_severity": 20,

+                 "fedora_messaging_user_lenkaseg": True,

+                 "fedora_messaging_user_patrikp": True,

+                 "priority": 0,

+                 "sent-at": "2024-07-04T15:48:25+00:00",

+             },

+             "id": "35d54838-b12c-49d5-949c-c503a71e7ae5",

+             "priority": 0,

+             "queue": "null",

+             "topic": "org.fedoraproject.stg.fas.group.member.remove",

+         }

+ 

+         self.toddler_cls.process = MagicMock()

+         self.toddler_cls.process(config, message)

+         self.toddler_cls.process.assert_called_once_with(config, message)

+ 

+     @patch("toddlers.utils.pagure.set_pagure")

+     def test_not_packager_group(self, mock_set_pagure, caplog):

+         """

+         Assert that if the group in the message is not "packager", plugin stops.

+         """

+         mock_set_pagure.return_value.remove_member_from_group.return_value = None

+         mock_set_pagure.return_value.get_all_groups.return_value = ["group1", "group2"]

+         caplog.set_level(logging.INFO)

+         config = {

+             "pagure_url": "https://pagure.io",

+             "pagure_stg": "https://stg.pagure.io",

+             "watched_groups": ["packager"],

+         }

+         message = MagicMock()

+         message.body = {

+             "msg": {

+                 "group": "not-packager",

+                 "user": "lenkaseg",

+             },

+             "topic": "org.fedoraproject.stg.fas.group.member.remove",

+         }

+         self.toddler_cls.process(config, message)

+         assert (

+             caplog.records[-1].message

+             == "User lenkaseg was not removed from packager group, but "

+             "from not-packager group, nothing to do."

+         )

+ 

+     @pytest.mark.parametrize(

+         "distgit_groups,ipa_groups,message_1,message_2,message_3,message_4",

+         (

+             (

+                 ["group1", "group2"],

+                 {"result": {"memberof_group": ["group1", "group3"]}},

+                 "User lenkaseg removed from distgit group: group1",

+                 "User lenkaseg removed from ipa group: group1",

+                 "User lenkaseg should be removed from following groups: ['group1']",

+                 "Ipa groups: ['group1', 'group3']",

+             ),

+             (

+                 None,

+                 {"result": {"memberof_group": ["group1", "group3"]}},

+                 "No distgit groups found, bailing.",

+                 "Distgit groups found: None",

+                 "Fetching all distgit groups:",

+                 "User lenkaseg was removed from packager group, removing from "

+                 "packager-related groups as well.",

+             ),

+             (

+                 ["group1", "group2"],

+                 {"result": {"memberof_group": ["group3", "group4"]}},

+                 "Seems that user lenkaseg is not member of any groups shared "

+                 "between ipa and distgit",

+                 "Ipa groups: ['group3', 'group4']",

+                 "Fetching groups user lenkaseg is member of in ipa:",

+                 "Distgit groups found: ['group1', 'group2']",

+             ),

+             (

+                 ["group1", "group2"],

+                 {"result": {"memberof_group": []}},

+                 "User lenkaseg is not member of any groups in ipa, bailing.",

+                 "Ipa groups: []",

+                 "Fetching groups user lenkaseg is member of in ipa:",

+                 "Distgit groups found: ['group1', 'group2']",

+             ),

+         ),

+         ids=(

+             "distgit_groups_found",

+             "distgit_group_not_found",

+             "no intersecting distgit/ipa groups",

+             "ipa_groups_not_found",

+         ),

+     )

+     @patch("toddlers.utils.pagure.set_pagure")

+     def test_is_packager_group_and_post_is_ok(

+         self,

+         mock_pagure,

+         distgit_groups,

+         ipa_groups,

+         message_1,

+         message_2,

+         message_3,

+         message_4,

+         caplog,

+     ):

+         """

+         Assert if group is packager, the plugin removes the user from related distgit groups.

+         """

+         mock_pagure_obj = MagicMock()

+         mock_pagure_obj.get_all_groups.return_value = distgit_groups

+         mock_pagure_obj.remove_member_from_group.return_value = None

+         mock_pagure.return_value = mock_pagure_obj

+ 

+         self.toddler_cls._ipa_session.Command.user_show.return_value = ipa_groups

+         caplog.set_level(logging.INFO)

+         config = {

+             "pagure_url": "https://example.io",

+             "pagure_stg": "https://example.stg.io",

+             "watched_groups": ["packager"],

+         }

+         message = MagicMock()

+         message.body = {

+             "msg": {"group": "packager", "user": "lenkaseg", "agent": "agent"},

+             "topic": "org.fedoraproject.stg.fas.group.member.remove",

+         }

+         self.toddler_cls.process(config, message)

+         assert caplog.records[-1].message == message_1

+         assert caplog.records[-2].message == message_2

+         assert caplog.records[-3].message == message_3

+         assert caplog.records[-4].message == message_4

+ 

+     @pytest.mark.parametrize(

+         "ipa_remove_member,error,message_1,message_2",

+         (

+             (

+                 Exception,

+                 None,

+                 "User lenkaseg removed from distgit group: group1",

+                 "Error while removing user lenkaseg from ipa group group1",

+             ),

+             (

+                 None,

+                 PagureError,

+                 "Error while removing user lenkaseg from distgit group group1",

+                 "User lenkaseg removed from ipa group: group1",

+             ),

+         ),

+         ids=("ipa_error", "distgit_error"),

+     )

+     @patch("toddlers.plugins.cleaning_packager_groups.pagure.set_pagure")

+     def test_is_packager_group_and_post_is_not_ok(

+         self,

+         mock_set_pagure,

+         ipa_remove_member,

+         error,

+         message_1,

+         message_2,

+         caplog,

+     ):

+         """

+         Assert correct behavior when encountered with pagure error.

+         """

+         mock_set_pagure.return_value.get_all_groups.return_value = ["group1", "group2"]

+         mock_set_pagure.return_value.remove_member_from_group.side_effect = error

+ 

+         self.toddler_cls._ipa_session.Command.user_show.return_value = {

+             "result": {"memberof_group": ["group1", "group3"]}

+         }

+ 

+         self.toddler_cls._ipa_session.Command.group_remove_member.side_effect = (

+             ipa_remove_member

+         )

+ 

+         caplog.set_level(logging.INFO)

+         config = {

+             "pagure_url": "https://example.io",

+             "pagure_stg": "https://example.stg.io",

+             "pagure_api_key": "pagure_key",

+             "watched_groups": ["packager"],

+         }

+         message = MagicMock()

+         message.body = {

+             "msg": {"group": "packager", "user": "lenkaseg", "agent": "agent"},

+             "topic": "org.fedoraproject.stg.fas.group.member.remove",

+         }

+ 

+         self.toddler_cls.process(config, message)

+         self.toddler_cls._ipa_session.Command.user_show.assert_called_with(

+             uid="lenkaseg"

+         )

+         assert caplog.records[-1].message == message_1

+         assert caplog.records[-2].message == message_2

+ import logging

+ class TestPagureGetAllGroups:

+     """

+     Test class for `toddlers.utils.pagure.Pagure.get_all_groups` method.

+     """

+ 

+     @pytest.mark.parametrize(

+         "url,message",

+         (

+             (

+                 "https://stg.pagure.io",

+                 "Retrieving groups from https://stg.pagure.io/api/0/groups",

+             ),

+             (

+                 "https://stg.src.fedoraproject.org",

+                 "Retrieving groups from https://stg.src.fedoraproject.org/api/0/groups",

+             ),

+         ),

+         ids=(

+             "pagure_url",

+             "distgit_url",

+         ),

+     )

+     def test_get_all_groups(self, url, message, caplog):

+         """

+         Assert correct retrieval of distgit groups

+         """

+         config = {

+             "pagure_url": url,

+             "pagure_api_key": "Very secret key",

+         }

+         self.pagure = pagure.set_pagure(config)

+         self.pagure._requests_session = Mock()

+         caplog.set_level(logging.INFO)

+         response_mock = MagicMock()

+         response_mock.ok.return_value = True

+         response_mock.json.return_value = {

+             "groups": [

+                 "group_a",

+                 "group_b",

+             ],

+             "pagination": {

+                 "next": None,

+             },

+         }

+ 

+         # mock_request.side_effect = request

+         self.pagure._requests_session.get.return_value = response_mock

+ 

+         result = self.pagure.get_all_groups()

+         assert result == [

+             "group_a",

+             "group_b",

+         ]

+         assert caplog.records[-1].message == message

+ 

+ 

+ fas_url = "https://fasjson.fedoraproject.org/"

+ # Env vars for bootstraping ipalib API

+ KRB5_CONF = "path_to_krb5.conf"

+ IPA_CONFDIR = "path_to_dir/synced_folders/ipa/ipa"

+ 

+ [consumer_config.cleaning_packager_groups]

+ watched_groups = ["packager"]

+ """

+ The script is triggered by fedora-messaging messages published under the topic

+ ``toddlers.trigger.fas.group.member.remove`` and checks if a user was removed

+ from group "packagers". If yes, user is removed from packager related groups

+ as well.

+ """

+ 

+ import logging

+ import os

+ 

+ import ipalib

+ 

+ from toddlers.base import ToddlerBase

+ from toddlers.exceptions import PagureError

+ from toddlers.utils import pagure

+ 

+ _log = logging.getLogger(__name__)

+ 

+ 

+ class CleanPackagerGroups(ToddlerBase):

+     """Listens to messages to check for a membership removal message from FAS"""

+ 

+     name: str = "clean_packagers_groups"

+     amqp_topics: list[str] = [

+         "org.fedoraproject.*.fas.group.member.removed",

+     ]

+     pagure: pagure.Pagure

+ 

+     def __init__(self):

+         super().__init__()

+         self.pagure_url = None

+         self.dist_git = None

+         self._ipa_session = None

+ 

+     def accepts_topic(self, topic):

+         """Returns a boolean whether this toddler is interested in messages

+         from this specific topic.

+         """

+         return topic.startswith("org.fedoraproject.") and topic.endswith(

+             "fas.group.member.removed"

+         )

+ 

+     def _get_ipa_session(self, config):  # pragma: no cover

+         """Makes an ipa session that handles logging in"""

+         if self._ipa_session is None:

+             conf_vars = ("KRB5_CONFIG", "IPA_CONFDIR")

+             for conf_var in conf_vars:

+                 if not config.get(conf_var):

+                     continue

+                 os.environ[conf_var] = config[conf_var]

+             self._ipa_session = ipalib.api

+             self._ipa_session.bootstrap(context="custom")

+             self._ipa_session.load_plugins()

+             self._ipa_session.finalize()

+             self._ipa_session.Backend.rpcclient.connect()

+         return self._ipa_session

+ 

+     def process(self, config, message):

+         """Process a given message. Remove user that is being removed from

+         a packager group from all groups in distgit"""

+         msg = message.body

+         user = msg["msg"]["user"]

+         group = msg["msg"]["group"]

+         watched_groups = config.get("watched_groups")

+         # If user is not removed from packager group, bail

+         if group not in watched_groups:

+             _log.info(

+                 f"User {user} was not removed from packager group, "

+                 f"but from {group} group, nothing to do."

+             )

+             return

+ 

+         _log.info(

+             f"User {user} was removed from {group} group, removing from "

+             "packager-related groups as well."

+         )

+ 

+         self.dist_git = pagure.set_pagure(

+             {

+                 "pagure_url": config.get("dist_git_url"),

+                 "pagure_api_key": config.get("dist_git_token"),

+             }

+         )

+         _log.info("Fetching all distgit groups:")

+         distgit_groups = self.dist_git.get_all_groups()

+         _log.info(f"Distgit groups found: {distgit_groups}")

+ 

+         if not distgit_groups:

+             _log.info("No distgit groups found, bailing.")

+             return

+ 

+         ipa_session = self._get_ipa_session(config)

+         _log.info(f"Fetching groups user {user} is member of in ipa:")

+         ipa_user = ipa_session.Command.user_show(uid=user)

+         ipa_groups = ipa_user["result"]["memberof_group"]

+         _log.info(f"Ipa groups: {ipa_groups}")

+ 

+         if not ipa_groups:

+             _log.info(f"User {user} is not member of any groups in ipa, bailing.")

+             return

+ 

+         intersection = list(set(distgit_groups) & set(ipa_groups))

+         if not intersection:

+             _log.info(

+                 f"Seems that user {user} is not member of any "

+                 "groups shared between ipa and distgit"

+             )

+             return

+         _log.info(

+             f"User {user} should be removed from following groups: {intersection}"

+         )

+ 

+         for group in intersection:

+             try:

+                 # Remove user from ipa groups:

+                 ipa_session.Command.group_remove_member(cn=group, user=user)

+                 _log.info(f"User {user} removed from ipa group: {group}")

+             except Exception:

+                 _log.exception(

+                     f"Error while removing user {user} from ipa group {group}"

+                 )

+             try:

+                 # Remove user from distgit groups:

+                 # pagure token with acls=group_modify needed

+                 self.dist_git.remove_member_from_group(user, group)

+                 _log.info(f"User {user} removed from distgit group: {group}")

+             except PagureError:

+                 _log.exception(

+                     f"Error while removing user {user} from distgit group {group}"

+                 )

+     def get_all_groups(self):

+         """Returns list of all groups from Pagure or Distgit"""

+         url = f"{self._pagure_url}/api/0/groups"

+         all_groups = []

+         while url:

+             log.info(f"Retrieving groups from {url}")

+             response = self._requests_session.get(url)

+             data = response.json()

+             groups = data.get("groups", [])

+             url = data.get("pagination", dict()).get("next", "")

+             all_groups.extend(groups)

+         return all_groups

+