add keystone auth backend

st2auth/st2auth/backends/keystone.py

@@ -0,0 +1,64 @@
+# Licensed to the StackStorm, Inc ('StackStorm') under one or more
+# contributor license agreements.  See the NOTICE file distributed with
+# this work for additional information regarding copyright ownership.
+# The ASF licenses this file to You under the Apache License, Version 2.0
+# (the "License"); you may not use this file except in compliance with
+# the License.  You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+from st2common import log as logging
+from st2auth.backends.base import BaseAuthenticationBackend
+import requests
+
+__all__ = [
+    'KeystoneAuthenticationBackend'
+]
+
+LOG = logging.getLogger(__name__)
+
+
+class KeystoneAuthenticationBackend(BaseAuthenticationBackend):
+    """
+    Backend which reads authentication information from keystone
+
+    Note: This backend depends on the "requests" library.
+    """
+
+    def __init__(self, keystone_url, keystone_version=2):
+        """
+        :param keystone_url: Url of the Keystone server to authenticate against.
+        :type keystone_url: ``str``
+        :param keystone_version: Keystone version to authenticate against (default to 2).
+        :type keystone_version: ``int``
+        """
+        self._keystone_url = keystone_url
+        self._keystone_version = keystone_version
+
+    def authenticate(self, username, password):
+        creds = {
+            "auth": {
+                "passwordCredentials": {
+                    "username": username,
+                    "password": password
+                }
+            }
+        }
+        login = requests.post(self._keystone_url, json=creds)
+
+        if login.status_code == 200:
+            LOG.debug('Authentication for user "{}" successful'.format(username))
+            return True
+        else:
+            LOG.debug('Authentication for user "{}" failed: {}'.format(username, login.content))
+            return False
+
+    def get_user(self, username):
+        pass