inspec/lib/bundles/inspec-supermarket/api.rb

# encoding: utf-8
# author: Christoph Hartmann
# author: Dominik Richter

require 'net/http'

module Supermarket
  class API
    SUPERMARKET_URL = 'https://supermarket.chef.io'.freeze

    def self.supermarket_url
      SUPERMARKET_URL
    end

    # displays a list of profiles
    def self.profiles
      url = "#{SUPERMARKET_URL}/api/v1/tools-search"
      _success, data = get(url, { q: 'compliance_profile' })
      if !data.nil?
        profiles = JSON.parse(data)
        profiles['items']
      else
        []
      end
    end

    def self.profile_name(profile)
      uri = URI(profile)
      [uri.host, uri.path[1..-1]]
    rescue URI::Error => _e
      nil
    end

    # displays profile infos
    def self.info(profile)
      _tool_owner, tool_name = profile_name("supermarket://#{profile}")
      url = "#{SUPERMARKET_URL}/api/v1/tools/#{tool_name}"
      _success, data = get(url, {})
      if !data.nil?
        JSON.parse(data)
      else
        {}
      end
    rescue JSON::ParserError
      {}
    end

    # compares a profile with the supermarket tool info
    def self.same?(profile, supermarket_tool)
      tool_owner, tool_name = profile_name(profile)
      tool = "#{SUPERMARKET_URL}/api/v1/tools/#{tool_name}"
      supermarket_tool['tool_owner'] == tool_owner && supermarket_tool['tool'] == tool
    end

    def self.find(profile)
      profiles = Supermarket::API.profiles
      if !profiles.empty?
        index = profiles.index { |t| same?(profile, t) }
        # return profile or nil
        profiles[index] if !index.nil? && index >= 0
      end
    end

    # verifies that a profile exists
    def self.exist?(profile)
      !find(profile).nil?
    end

    def self.get(url, params)
      uri = URI.parse(url)
      uri.query = URI.encode_www_form(params)
      req = Net::HTTP::Get.new(uri)
      send_request(uri, req)
    end

    def self.send_request(uri, req)
      # send request
      res = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == 'https') {|http|
        http.request(req)
      }
      [res.is_a?(Net::HTTPSuccess), res.body]
    end
  end
end