feat(commands): reset a user's password

with optional notification to an email address

Author: thekaveman

compiler_admin/commands/reset_password.py

@@ -0,0 +1,38 @@
+from argparse import Namespace
+
+from compiler_admin.commands import RESULT_SUCCESS, RESULT_FAILURE
+from compiler_admin.services.google import CallGAMCommand, user_account_name, user_exists
+
+
+def reset_password(args: Namespace) -> int:
+    """Reset a user's password.
+
+    Optionally notify an email address with the new randomly generated password.
+
+    Args:
+        username (str): the user account to reset.
+
+        notify (str): an email address to send the new password notification.
+    Returns:
+        A value indicating if the operation succeeded or failed.
+    """
+    if not hasattr(args, "username"):
+        raise ValueError("username is required")
+
+    account = user_account_name(args.username)
+
+    if not user_exists(account):
+        print(f"User does not exist: {account}")
+        return RESULT_FAILURE
+
+    command = ("update", "user", account, "password", "random")
+
+    notify = getattr(args, "notify", None)
+    if notify:
+        command += ("notify", notify, "from", "[email protected]")
+
+    print(f"User exists, resetting password: {account}")
+
+    res = CallGAMCommand(command)
+
+    return RESULT_SUCCESS if res == RESULT_SUCCESS else RESULT_FAILURE

compiler_admin/main.py

@@ -8,6 +8,7 @@
 from compiler_admin.commands.info import info
 from compiler_admin.commands.init import init
 from compiler_admin.commands.offboard import offboard
+from compiler_admin.commands.reset_password import reset_password
 from compiler_admin.commands.restore import restore
 from compiler_admin.commands.signout import signout
 
@@ -60,6 +61,9 @@ def _subcmd(name, help, add_username_arg=True) -> argparse.ArgumentParser:
         "--force", action="store_true", default=False, help="Don't ask for confirmation before offboarding."
     )
 
+    reset_parser = _subcmd("reset-password", help="Reset a user's password to a randomly generated string.")
+    reset_parser.add_argument("--notify", help="An email address to send the newly generated password.")
+
     _subcmd("restore", help="Restore an email backup from a prior offboarding.")
 
     signout_parser = _subcmd("signout", help="Signs a user out from all active sessions.")
@@ -86,6 +90,8 @@ def _subcmd(name, help, add_username_arg=True) -> argparse.ArgumentParser:
         return offboard(args)
     elif args.command == "restore":
         return restore(args)
+    elif args.command == "reset-password":
+        return reset_password(args)
     elif args.command == "signout":
         return signout(args)
 

tests/commands/test_reset_password.py

@@ -0,0 +1,60 @@
+from argparse import Namespace
+import pytest
+
+from compiler_admin.commands import RESULT_FAILURE, RESULT_SUCCESS
+from compiler_admin.commands.reset_password import reset_password, __name__ as MODULE
+
+
+@pytest.fixture
+def mock_google_user_exists(mock_google_user_exists):
+    return mock_google_user_exists(MODULE)
+
+
+@pytest.fixture
+def mock_google_CallGAMCommand(mock_google_CallGAMCommand):
+    return mock_google_CallGAMCommand(MODULE)
+
+
+def test_reset_password_user_username_required():
+    args = Namespace()
+
+    with pytest.raises(ValueError, match="username is required"):
+        reset_password(args)
+
+
+def test_reset_password_user_does_not_exist(mock_google_user_exists):
+    mock_google_user_exists.return_value = False
+
+    args = Namespace(username="username")
+    res = reset_password(args)
+
+    assert res == RESULT_FAILURE
+
+
+def test_reset_password_user_exists(mock_google_user_exists, mock_google_CallGAMCommand):
+    mock_google_user_exists.return_value = True
+
+    args = Namespace(username="username")
+    res = reset_password(args)
+
+    assert res == RESULT_SUCCESS
+
+    mock_google_CallGAMCommand.assert_called_once()
+    call_args = " ".join(mock_google_CallGAMCommand.call_args[0][0])
+    assert "update user" in call_args
+    assert "password random" in call_args
+
+
+def test_reset_password_notify(mock_google_user_exists, mock_google_CallGAMCommand):
+    mock_google_user_exists.return_value = True
+
+    args = Namespace(username="username", notify="[email protected]")
+    res = reset_password(args)
+
+    assert res == RESULT_SUCCESS
+
+    mock_google_CallGAMCommand.assert_called_once()
+    call_args = " ".join(mock_google_CallGAMCommand.call_args[0][0])
+    assert "update user" in call_args
+    assert "password random" in call_args
+    assert "notify [email protected] from [email protected]" in call_args

tests/conftest.py

@@ -64,6 +64,12 @@ def mock_commands_offboard(mock_module_name):
     return mock_module_name("offboard")
 
 
+@pytest.fixture
+def mock_commands_reset_password(mock_module_name):
+    """Fixture returns a function that patches commands.reset_password in a given module."""
+    return mock_module_name("reset_password")
+
+
 @pytest.fixture
 def mock_commands_restore(mock_module_name):
     """Fixture returns a function that patches commands.restore in a given module."""

tests/test_main.py

@@ -39,6 +39,11 @@ def mock_commands_offboard(mock_commands_offboard):
     return mock_commands_offboard(MODULE)
 
 
+@pytest.fixture
+def mock_commands_reset_password(mock_commands_reset_password):
+    return mock_commands_reset_password(MODULE)
+
+
 @pytest.fixture
 def mock_commands_restore(mock_commands_restore):
     return mock_commands_restore(MODULE)
@@ -177,6 +182,28 @@ def test_main_offboard_no_username(mock_commands_offboard):
         assert mock_commands_offboard.call_count == 0
 
 
+def test_main_reset_password(mock_commands_reset_password):
+    main(argv=["reset-password", "username"])
+
+    mock_commands_reset_password.assert_called_once()
+    call_args = mock_commands_reset_password.call_args.args
+    assert Namespace(command="reset-password", username="username", notify=None) in call_args
+
+
+def test_main_reset_password_notify(mock_commands_reset_password):
+    main(argv=["reset-password", "username", "--notify", "notification"])
+
+    mock_commands_reset_password.assert_called_once()
+    call_args = mock_commands_reset_password.call_args.args
+    assert Namespace(command="reset-password", username="username", notify="notification") in call_args
+
+
+def test_main_reset_password_no_username(mock_commands_reset_password):
+    with pytest.raises(SystemExit):
+        main(argv=["reset-password"])
+        assert mock_commands_reset_password.call_count == 0
+
+
 def test_main_restore(mock_commands_restore):
     main(argv=["restore", "username"])