1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
# Copyright 2022 The Sigstore Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
"""
The `python -m id` entrypoint.
"""
import argparse
import logging
import os
from . import __version__
logging.basicConfig()
logger = logging.getLogger(__name__)
# NOTE: We configure the top package logger, rather than the root logger,
# to avoid overly verbose logging in third-party code by default.
package_logger = logging.getLogger("id")
package_logger.setLevel(os.environ.get("ID_LOGLEVEL", "INFO").upper())
def _parser() -> argparse.ArgumentParser:
parser = argparse.ArgumentParser(
prog="id",
description="a tool for generating OIDC identities",
formatter_class=argparse.ArgumentDefaultsHelpFormatter,
)
parser.add_argument("-V", "--version", action="version", version=f"%(prog)s {__version__}")
parser.add_argument(
"-v",
"--verbose",
action="count",
default=0,
help="run with additional debug logging; supply multiple times to increase verbosity",
)
parser.add_argument(
"-d",
"--decode",
action="store_true",
help="decode the OIDC token into JSON",
)
parser.add_argument(
"audience",
type=str,
default=os.getenv("ID_OIDC_AUDIENCE"),
help="the OIDC audience to use",
)
return parser
def main() -> None:
parser = _parser()
args = parser.parse_args()
# Configure logging upfront, so that we don't miss anything.
if args.verbose >= 1:
package_logger.setLevel("DEBUG")
if args.verbose >= 2:
logging.getLogger().setLevel("DEBUG")
logger.debug(f"parsed arguments {args}")
from . import decode_oidc_token, detect_credential
token = detect_credential(args.audience)
if token and args.decode:
header, payload, signature = decode_oidc_token(token)
print(header)
print(payload)
else:
print(token)
if __name__ == "__main__": # pragma: no cover
main()
|
