Spaces:
Running on Zero
Running on Zero
File size: 3,792 Bytes
bbd07c7 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 | #!/usr/bin/env python3
"""
Sahih Islam Administrative Bootstrap Script
===========================================
Securely bootstraps or promotes the initial system administrator directly via database access.
Used during infrastructure provisioning or initial production deployment.
Usage:
python bootstrap_admin.py --uid <firebase_uid>
python bootstrap_admin.py --email <user_email>
"""
import sys
import os
import argparse
import asyncio
from datetime import datetime
# Add BACKEND directory to sys.path
sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
from app.core.config import settings
from motor.motor_asyncio import AsyncIOMotorClient
async def bootstrap_admin_cli(uid: str = None, email: str = None):
if not uid and not email:
print("❌ Error: Either --uid or --email must be provided.")
sys.exit(1)
print("==================================================")
print(" Sahih Islam Administrator Bootstrap Utility")
print(f" Environment : {settings.APP_ENV}")
print(f" Target DB : {settings.MONGO_DB_NAME}")
print("==================================================")
client = AsyncIOMotorClient(settings.MONGO_URI)
db = client[settings.MONGO_DB_NAME]
users_col = db["users"]
lock_col = db["admin_bootstrap_lock"]
# 1. Locate the target user
query = {"uid": uid} if uid else {"email": email.strip().lower()}
user = await users_col.find_one(query)
if not user:
target_str = f"UID='{uid}'" if uid else f"Email='{email}'"
print(f"❌ User not found in database with {target_str}.")
print(" Ensure the user has completed registration or first login before running bootstrap.")
sys.exit(1)
target_uid = user.get("uid")
target_email = user.get("email", "N/A")
current_role = user.get("role", "USER")
print(f"👤 Found User: UID={target_uid}, Email={target_email}, Current Role={current_role}")
if current_role == "ADMIN" and user.get("is_admin") is True:
print("ℹ️ User is already an active administrator.")
sys.exit(0)
# 2. Acquire or update singleton lock
now = datetime.utcnow()
try:
await lock_col.update_one(
{"_id": "admin_singleton_lock"},
{
"$set": {
"bootstrapped_by_uid": target_uid,
"bootstrapped_via": "CLI_BOOTSTRAP",
"updated_at": now
},
"$setOnInsert": {
"created_at": now
}
},
upsert=True
)
except Exception as e:
print(f"⚠️ Warning: Could not update admin_singleton_lock: {e}")
# 3. Promote user atomically
await users_col.update_one(
{"uid": target_uid},
{
"$set": {
"role": "ADMIN",
"is_admin": True,
"updated_at": now
}
}
)
print("==================================================")
print("✅ SUCCESS: Administrator successfully bootstrapped!")
print(f" UID : {target_uid}")
print(f" Email : {target_email}")
print(" Role : ADMIN")
print(" Timestamp: " + now.isoformat())
print("==================================================")
def main():
parser = argparse.ArgumentParser(description="Bootstrap initial Sahih Islam administrator.")
parser.add_argument("--uid", type=str, help="Firebase UID of the user to promote to ADMIN")
parser.add_argument("--email", type=str, help="Email of the user to promote to ADMIN")
args = parser.parse_args()
asyncio.run(bootstrap_admin_cli(uid=args.uid, email=args.email))
if __name__ == "__main__":
main()
|