[pkg] unify client and server into a single python package

We have been discussing about this merge for a while.
Its main goal is to simplify things: code navigation, but also
packaging.

The rationale is that the code is more cohesive in this way, and there's
only one source package to install.

Dependencies that are only for the server or the client will not be
installed by default, and they are expected to be provided by the
environment. There are setuptools extras defined for the client and the
server.

Debianization is still expected to split the single source package into
3 binaries.

Another avantage is that the documentation can now install a single
package with a single step, and therefore include the docstrings into
the generated docs.

- Resolves: #8896

1 files changed, 74 insertions, 0 deletions

diff --git a/src/leap/soledad/client/_http.py b/src/leap/soledad/client/_http.py
new file mode 100644
index 00000000..2a6b9e39
--- /dev/null
+++ b/src/leap/soledad/client/_http.py
@@ -0,0 +1,74 @@
+# -*- coding: utf-8 -*-
+# _http.py
+# Copyright (C) 2017 LEAP
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program. If not, see <http://www.gnu.org/licenses/>.
+"""
+A twisted-based, TLS-pinned, token-authenticated HTTP client.
+"""
+import base64
+
+from twisted.internet import reactor
+from twisted.web.iweb import IAgent
+from twisted.web.client import Agent
+from twisted.web.http_headers import Headers
+
+from treq.client import HTTPClient as _HTTPClient
+
+from zope.interface import implementer
+
+from leap.common.certs import get_compatible_ssl_context_factory
+
+
+__all__ = ['HTTPClient', 'PinnedTokenAgent']
+
+
+class HTTPClient(_HTTPClient):
+
+    def __init__(self, uuid, token, cert_file):
+        self._agent = PinnedTokenAgent(uuid, token, cert_file)
+        super(self.__class__, self).__init__(self._agent)
+
+    def set_token(self, token):
+        self._agent.set_token(token)
+
+
+@implementer(IAgent)
+class PinnedTokenAgent(Agent):
+
+    def __init__(self, uuid, token, cert_file):
+        self._uuid = uuid
+        self._token = None
+        self._creds = None
+        self.set_token(token)
+        # pin this agent with the platform TLS certificate
+        factory = get_compatible_ssl_context_factory(cert_file)
+        Agent.__init__(self, reactor, contextFactory=factory)
+
+    def set_token(self, token):
+        self._token = token
+        self._creds = self._encoded_creds()
+
+    def _encoded_creds(self):
+        creds = '%s:%s' % (self._uuid, self._token)
+        encoded = base64.b64encode(creds)
+        return 'Token %s' % encoded
+
+    def request(self, method, uri, headers=None, bodyProducer=None):
+        # authenticate the request
+        headers = headers or Headers()
+        headers.addRawHeader('Authorization', self._creds)
+        # perform the authenticated request
+        return Agent.request(
+            self, method, uri, headers=headers, bodyProducer=bodyProducer)