feat: delete sharedkey if invalid and attempt other auth method

Author: atadj

src/sumo/wrapper/_auth_provider.py

@@ -99,6 +99,9 @@ def has_case_token(self, case_uuid):
             get_token_path(self._resource_id, ".sharedkey", case_uuid)
         )
 
+    def delete_token(self):
+        return False
+
     pass
 
 
@@ -400,9 +403,10 @@ class AuthProviderSumoToken(AuthProvider):
     def __init__(self, resource_id, case_uuid=None):
         super().__init__(resource_id)
         protect_token_cache(resource_id, ".sharedkey", case_uuid)
-        token_path = get_token_path(resource_id, ".sharedkey", case_uuid)
-        with open(token_path, "r") as f:
+        self.token_path = get_token_path(resource_id, ".sharedkey", case_uuid)
+        with open(self.token_path, "r") as f:
             self._token = f.readline().strip()
+
         return
 
     def get_token(self):
@@ -411,6 +415,11 @@ def get_token(self):
     def get_authorization(self):
         return {"X-SUMO-Token": self._token}
 
+    def delete_token(self):
+        if os.path.exists(self.token_path):
+            os.unlink(self.token_path)
+        return True
+
 
 @tn.retry(
     retry=tn.retry_if_exception(_maybe_nfs_exception),

src/sumo/wrapper/sumo_client.py

@@ -100,19 +100,6 @@ def __init__(
                 pass
             pass
 
-        cleanup_shared_keys()
-
-        self.auth = get_auth_provider(
-            client_id=APP_REGISTRATION[env]["CLIENT_ID"],
-            authority=f"{AUTHORITY_HOST_URI}/{TENANT_ID}",
-            resource_id=APP_REGISTRATION[env]["RESOURCE_ID"],
-            interactive=interactive,
-            refresh_token=refresh_token,
-            access_token=access_token,
-            devicecode=devicecode,
-            case_uuid=case_uuid,
-        )
-
         if env == "prod":
             self.base_url = "https://api.sumo.equinor.com/api/v1"
         elif env == "localhost":
@@ -121,6 +108,41 @@ def __init__(
             self.base_url = (
                 f"https://main-sumo-core-{env}.c3.radix.equinor.com/api/v1"
             )
+        cleanup_shared_keys()
+
+        def _get_auth_provider():
+            return get_auth_provider(
+                client_id=APP_REGISTRATION[env]["CLIENT_ID"],
+                authority=f"{AUTHORITY_HOST_URI}/{TENANT_ID}",
+                resource_id=APP_REGISTRATION[env]["RESOURCE_ID"],
+                interactive=interactive,
+                refresh_token=refresh_token,
+                access_token=access_token,
+                devicecode=devicecode,
+                case_uuid=case_uuid,
+            )
+
+        def _try_setup_auth_provider():
+            self.auth = _get_auth_provider()
+            response = httpx.get(
+                url=self.base_url + "/userpermissions",
+                headers=self.auth.get_authorization(),
+            )
+            if response.is_success:
+                return True, False
+
+            elif response.status_code == 401:
+                return False, self.auth.delete_token()
+
+            else:
+                raise httpx.HTTPStatusError
+
+        ok, retry = _try_setup_auth_provider()
+        if retry:
+            ok, retry = _try_setup_auth_provider()
+            if retry:
+                ok, retry = _try_setup_auth_provider()
+
         return
 
     def __enter__(self):