Remove oauth provider (#15666)

* Remove oauth provider

This removes the oauth provider functionality from awx. The
oauth2_provider app and all references to it have been removed.
Migrations to delete the two tables that locally overwrote
oauth2_provider tables are included. This change does not include
migrations to delete the tables provided by the oauth2_provider app.

Also not included here are changes to awxkit, awx_collection or the ui.

* Fix linters

* Update migrations after rebase

* Update collection tests for auth changes

The changes in https://github.com/ansible/awx/pull/15554 will cause a
few collection tests to fail, depending on what the test configuration
is. This changes the tests to look for a specific warning rather than
counting the number of warnings emitted.

* Update migration

* Removed unused oauth_scopes references

---------

Co-authored-by: Mike Graves <mgraves@redhat.com>
Co-authored-by: Alan Rominger <arominge@redhat.com>

awx/main/management/commands/cleanup_tokens.py

@@ -1,26 +0,0 @@
-import logging
-from django.core import management
-from django.core.management.base import BaseCommand
-
-from awx.main.models import OAuth2AccessToken
-from oauth2_provider.models import RefreshToken
-
-
-class Command(BaseCommand):
-    def init_logging(self):
-        log_levels = dict(enumerate([logging.ERROR, logging.INFO, logging.DEBUG, 0]))
-        self.logger = logging.getLogger('awx.main.commands.cleanup_tokens')
-        self.logger.setLevel(log_levels.get(self.verbosity, 0))
-        handler = logging.StreamHandler()
-        handler.setFormatter(logging.Formatter('%(message)s'))
-        self.logger.addHandler(handler)
-        self.logger.propagate = False
-
-    def execute(self, *args, **options):
-        self.verbosity = int(options.get('verbosity', 1))
-        self.init_logging()
-        total_accesstokens = OAuth2AccessToken.objects.all().count()
-        total_refreshtokens = RefreshToken.objects.all().count()
-        management.call_command('cleartokens')
-        self.logger.info("Expired OAuth 2 Access Tokens deleted: {}".format(total_accesstokens - OAuth2AccessToken.objects.all().count()))
-        self.logger.info("Expired OAuth 2 Refresh Tokens deleted: {}".format(total_refreshtokens - RefreshToken.objects.all().count()))

awx/main/management/commands/create_oauth2_token.py

@@ -1,34 +0,0 @@
-# Django
-from django.core.management.base import BaseCommand, CommandError
-from django.contrib.auth.models import User
-from django.core.exceptions import ObjectDoesNotExist
-
-# AWX
-from awx.api.serializers import OAuth2TokenSerializer
-
-
-class Command(BaseCommand):
-    """Command that creates an OAuth2 token for a certain user. Returns the value of created token."""
-
-    help = 'Creates an OAuth2 token for a user.'
-
-    def add_arguments(self, parser):
-        parser.add_argument('--user', dest='user', type=str)
-
-    def handle(self, *args, **options):
-        if not options['user']:
-            raise CommandError('Username not supplied. Usage: awx-manage create_oauth2_token --user=username.')
-        try:
-            user = User.objects.get(username=options['user'])
-        except ObjectDoesNotExist:
-            raise CommandError('The user does not exist.')
-        config = {'user': user, 'scope': 'write'}
-        serializer_obj = OAuth2TokenSerializer()
-
-        class FakeRequest(object):
-            def __init__(self):
-                self.user = user
-
-        serializer_obj.context['request'] = FakeRequest()
-        token_record = serializer_obj.create(config)
-        self.stdout.write(token_record.token)

awx/main/management/commands/regenerate_secret_key.py

@@ -10,7 +10,7 @@ from django.db.models.signals import post_save
 from awx.conf import settings_registry
 from awx.conf.models import Setting
 from awx.conf.signals import on_post_save_setting
-from awx.main.models import UnifiedJob, Credential, NotificationTemplate, Job, JobTemplate, WorkflowJob, WorkflowJobTemplate, OAuth2Application
+from awx.main.models import UnifiedJob, Credential, NotificationTemplate, Job, JobTemplate, WorkflowJob, WorkflowJobTemplate
 from awx.main.utils.encryption import encrypt_field, decrypt_field, encrypt_value, decrypt_value, get_encryption_key
 
 
@@ -45,7 +45,6 @@ class Command(BaseCommand):
         self._notification_templates()
         self._credentials()
         self._unified_jobs()
-        self._oauth2_app_secrets()
         self._settings()
         self._survey_passwords()
         return self.new_key
@@ -74,13 +73,6 @@ class Command(BaseCommand):
                 uj.start_args = encrypt_field(uj, 'start_args', secret_key=self.new_key)
                 uj.save()
 
-    def _oauth2_app_secrets(self):
-        for app in OAuth2Application.objects.iterator():
-            raw = app.client_secret
-            app.client_secret = raw
-            encrypted = encrypt_value(raw, secret_key=self.new_key)
-            OAuth2Application.objects.filter(pk=app.pk).update(client_secret=encrypted)
-
     def _settings(self):
         # don't update the cache, the *actual* value isn't changing
         post_save.disconnect(on_post_save_setting, sender=Setting)

awx/main/management/commands/revoke_oauth2_tokens.py

@@ -1,38 +0,0 @@
-# Django
-from django.core.management.base import BaseCommand, CommandError
-from django.contrib.auth.models import User
-from django.core.exceptions import ObjectDoesNotExist
-
-# AWX
-from awx.main.models.oauth import OAuth2AccessToken
-from oauth2_provider.models import RefreshToken
-
-
-def revoke_tokens(token_list):
-    for token in token_list:
-        token.revoke()
-        print('revoked {} {}'.format(token.__class__.__name__, token.token))
-
-
-class Command(BaseCommand):
-    """Command that revokes OAuth2 access tokens."""
-
-    help = 'Revokes OAuth2 access tokens.  Use --all to revoke access and refresh tokens.'
-
-    def add_arguments(self, parser):
-        parser.add_argument('--user', dest='user', type=str, help='revoke OAuth2 tokens for a specific username')
-        parser.add_argument('--all', dest='all', action='store_true', help='revoke OAuth2 access tokens and refresh tokens')
-
-    def handle(self, *args, **options):
-        if not options['user']:
-            if options['all']:
-                revoke_tokens(RefreshToken.objects.filter(revoked=None))
-            revoke_tokens(OAuth2AccessToken.objects.all())
-        else:
-            try:
-                user = User.objects.get(username=options['user'])
-            except ObjectDoesNotExist:
-                raise CommandError('A user with that username does not exist.')
-            if options['all']:
-                revoke_tokens(RefreshToken.objects.filter(revoked=None).filter(user=user))
-            revoke_tokens(user.main_oauth2accesstoken.filter(user=user))