migrate legacy API

Signed-off-by: hongming <talonwan@yunify.com>

pkg/models/iam/im/im.go

@@ -19,11 +19,20 @@ package im
 
 import (
 	"github.com/pkg/errors"
+	"golang.org/x/crypto/bcrypt"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/klog"
+	"kubesphere.io/kubesphere/pkg/api"
 	iamv1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+	"kubesphere.io/kubesphere/pkg/apiserver/query"
+	kubesphereclient "kubesphere.io/kubesphere/pkg/client/clientset/versioned"
+	"kubesphere.io/kubesphere/pkg/informers"
+	resourcev1alpha3 "kubesphere.io/kubesphere/pkg/models/resources/v1alpha3/resource"
 )
 
 type IdentityManagementInterface interface {
 	CreateUser(user *iamv1alpha2.User) (*iamv1alpha2.User, error)
+	ListUsers(query *query.Query) (*api.ListResult, error)
 	DeleteUser(username string) error
 	ModifyUser(user *iamv1alpha2.User) (*iamv1alpha2.User, error)
 	DescribeUser(username string) (*iamv1alpha2.User, error)
@@ -36,3 +45,75 @@ var (
 	UserAlreadyExists           = errors.New("user already exists")
 	UserNotExists               = errors.New("user not exists")
 )
+
+func NewOperator(ksClient kubesphereclient.Interface, factory informers.InformerFactory) IdentityManagementInterface {
+
+	return &defaultIMOperator{
+		ksClient:       ksClient,
+		resourceGetter: resourcev1alpha3.NewResourceGetter(factory),
+	}
+
+}
+
+type defaultIMOperator struct {
+	ksClient       kubesphereclient.Interface
+	resourceGetter *resourcev1alpha3.ResourceGetter
+}
+
+func (im *defaultIMOperator) ModifyUser(user *iamv1alpha2.User) (*iamv1alpha2.User, error) {
+	return im.ksClient.IamV1alpha2().Users().Update(user)
+}
+
+func (im *defaultIMOperator) Authenticate(username, password string) (*iamv1alpha2.User, error) {
+
+	user, err := im.DescribeUser(username)
+
+	if err != nil {
+		klog.Error(err)
+		return nil, err
+	}
+	if checkPasswordHash(password, user.Spec.EncryptedPassword) {
+		return user, nil
+	}
+	return nil, AuthFailedIncorrectPassword
+}
+
+func (im *defaultIMOperator) ListUsers(query *query.Query) (*api.ListResult, error) {
+
+	result, err := im.resourceGetter.List(iamv1alpha2.ResourcesPluralUser, "", query)
+
+	if err != nil {
+		klog.Error(err)
+		return nil, err
+	}
+
+	return result, nil
+}
+
+func checkPasswordHash(password, hash string) bool {
+	err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(password))
+	return err == nil
+}
+
+func (im *defaultIMOperator) DescribeUser(username string) (*iamv1alpha2.User, error) {
+	user, err := im.resourceGetter.Get(iamv1alpha2.ResourcesPluralUser, "", username)
+
+	if err != nil {
+		klog.Error(err)
+		return nil, err
+	}
+	return user.(*iamv1alpha2.User), nil
+}
+
+func (im *defaultIMOperator) DeleteUser(username string) error {
+	return im.ksClient.IamV1alpha2().Users().Delete(username, metav1.NewDeleteOptions(0))
+}
+
+func (im *defaultIMOperator) CreateUser(user *iamv1alpha2.User) (*iamv1alpha2.User, error) {
+	user, err := im.ksClient.IamV1alpha2().Users().Create(user)
+	if err != nil {
+		klog.Error(err)
+		return nil, err
+	}
+	return user, nil
+}