Revize cfda1725

Re #8573 - Implemented get_public_key_of_a_certificate method in CertController and added /api/certificates/<id>/public_key endpoint

app.py

@@ -47 +47 @@
     return certificate_controller.get_certificate_trust_chain_by_id(id)
 
 
[e-mail]('/api/certificates/<id>/public_key', methods=["GET"])
+def get_public_key_of_a_certificate(id, certificate_controller: CertController):
+    return certificate_controller.get_public_key_of_a_certificate(id)
+
 def initialize_app(application) -> bool:
     """
     Initializes the application

src/controllers/certificates_controller.py

@@ -30 +30 @@
 
 E_NO_ISSUER_FOUND = {"success": False, "data": "No certificate authority with such unique ID exists."}
 E_NO_CERTIFICATES_FOUND = {"success": False, "data": "No such certificate found."}
+E_NO_CERT_PRIVATE_KEY_FOUND = {"success": False,
+                               "data": "Internal server error (certificate's private key cannot be found)."}
 E_NOT_JSON_FORMAT = {"success": False, "data": "The request must be JSON-formatted."}
 E_CORRUPTED_DATABASE = {"success": False, "data": "Internal server error (corrupted database)."}
 E_GENERAL_ERROR = {"success": False, "data": "Internal server error (unknown origin)."}
@@ -38 +40 @@
 
 C_CREATED_SUCCESSFULLY = 201
 C_BAD_REQUEST = 400
-C_NO_DATA = 205                                                         # TODO related to 204 issue
+C_NOT_FOUND = 404
+C_NO_DATA = 205  # TODO related to 204 issue
 C_INTERNAL_SERVER_ERROR = 500
 C_SUCCESS = 200
 
@@ -341 +344 @@
             USAGE: {CertController.INVERSE_KEY_MAP[k]: v for k, v in c.usages.items()},
             CA: c_issuer.certificate_id
         }
+
+    def get_public_key_of_a_certificate(self, id):
+        """
+        Get a private key used to sign a certificate in PEM format specified by certificate's ID
+
+        :param id: ID of a certificate whose public key is to be queried
+        :type id: dict | bytes
+
+        :rtype: PemResponse
+        """
+
+        # try to parse the supplied ID
+        try:
+            v = int(id)
+        except ValueError:
+            return E_WRONG_PARAMETERS, C_BAD_REQUEST
+
+        # find a certificate with using the given ID
+        cert = self.certificate_service.get_certificate(v)
+
+        if cert is None:
+            return E_NO_CERTIFICATES_FOUND, C_NOT_FOUND
+        else:
+            # certificate exists, fetch it's private key
+            private_key = self.key_service.get_key(cert.private_key_id)
+            if cert is None:
+                return E_NO_CERT_PRIVATE_KEY_FOUND, C_INTERNAL_SERVER_ERROR
+            else:
+                # TODO public key can be extracted from a certificate
+                # private key fetched, extract a public key from it
+                public_key = self.key_service.get_public_key(private_key)
+                return {"success": True, "data": public_key}, C_SUCCESS

tests/integration_tests/rest_api/certificates_test.py

@@ -542 +542 @@
 
     actual = ret.json["data"]
 
-    assert "".join(expected) == actual
+    assert "".join(expected) == actual
+
+
+def test_get_cert_public_key(server):
+    for i in range(6, 2):
+        ret = server.get(f"/api/certificates/{i}/public_key")
+
+        assert ret.status_code == 200
+
+        assert "data" in ret.json
+        assert "success" in ret.json
+        assert ret.json["success"]
+        assert "-----BEGIN PUBLIC KEY-----" in ret.json["data"]
+
+
+def test_get_cert_public_key_incorrect_id(server):
+    for i in range(111, 222, 333):
+        ret = server.get(f"/api/certificates/{i}/public_key")
+
+        assert ret.status_code == 404
+
+        assert "data" in ret.json
+        assert "success" in ret.json
+        assert not ret.json["success"]
+        assert "No such certificate found." == ret.json["data"]