Genians

import demistomock as demisto
from CommonServerPython import *

""" IMPORT """

import json
import requests
import urllib3

# Disable insecure warnings
urllib3.disable_warnings()


""" PARAMS """

SERVER_IP = demisto.params().get("server_ip")
APIKEY = demisto.params().get("apikey")
TAG_NAME = demisto.params().get("tag_name")

# Genian NAC Policy Center (Server) URL
BASE_URL = "https://" + SERVER_IP + ":8443/mc2"
# Genian NAC REST API Request URL
REQUEST_BASE_URL = "https://" + SERVER_IP + ":8443/mc2/rest/"
# Should We use SSL
USE_SSL = not demisto.params().get("insecure", False)
# Response Content Type
HEADER = {"accept": "application/json", "content-type": "application/json;charset=UTF-8"}


""" HELPER FUNCTIONS """


def http_request(method, url, body=None):
    """
    Makes an API call with the given arguments
    """
    try:
        result = requests.request(
            method,
            url,
            data=body,
            headers=HEADER,
            verify=USE_SSL,
        )
        if result.status_code < 200 or result.status_code >= 300:
            raise Exception(f"Error in Genian NAC Integration API Call. Code: {str(result.status_code)}")

        json_result = result.json()

        return json_result

    except Exception as e:
        return_error(str(e))


def get_ip_nodeid(ip: str):
    URL = REQUEST_BASE_URL + "nodes/" + ip + "/managementscope?apiKey=" + APIKEY
    result = http_request("GET", URL)
    return result


def get_tag_list():
    URL = REQUEST_BASE_URL + "tags?page=1&pageSize=30&npName=" + TAG_NAME + "&apiKey=" + APIKEY
    result = http_request("GET", URL)
    return result


def list_tag_data_string(tag_name: str):
    data = [
        {"id": "", "name": tag_name, "description": "", "startDate": "", "expireDate": "", "periodType": "", "expiryPeriod": ""}
    ]
    return data


""" COMMANDS + REQUESTS FUNCTIONS """


def assign_ip_tag(nodeid: str):
    URL = REQUEST_BASE_URL + "nodes/" + nodeid + "/tags?apiKey=" + APIKEY
    data = list_tag_data_string(TAG_NAME)
    result = http_request("POST", URL, body=json.dumps(data))
    return result


def assign_ip_tag_command():
    IP = demisto.getArg("ip")

    result = get_ip_nodeid(IP)
    nodeid = result[0]["nl_nodeid"]

    if not nodeid:
        demisto.results(f"IP not found. [{IP}] is not exist in your network")
    else:
        result2 = assign_ip_tag(nodeid)

        tag_check = "assign fail"
        for a in result2:
            if a["Name"] == TAG_NAME:
                tag_check = TAG_NAME
                break

        if tag_check == TAG_NAME:
            hr = f"IP : [{IP}], [{TAG_NAME}] Tag assign success."
            assign_tag = {"nodeId": nodeid, "Name": TAG_NAME}
            demisto.results(
                {
                    "Type": entryTypes["note"],
                    "ContentsFormat": formats["json"],
                    "Contents": result2,
                    "ReadableContentsFormat": formats["text"],
                    "HumanReadable": hr,
                    "EntryContext": {"genians.tag.(val.Tag == obj.Tag)": assign_tag},
                }
            )
        else:
            raise Exception(f"IP : [{IP}], [{TAG_NAME}] Tag assign fail.")


def unassign_ip_tag(nodeid: str, data):
    URL = REQUEST_BASE_URL + "nodes/" + nodeid + "/tags?apiKey=" + APIKEY
    result = http_request("DELETE", URL, body=data)
    return result


def unassign_ip_tag_command():
    IP = demisto.getArg("ip")

    result = get_ip_nodeid(IP)
    nodeid = result[0]["nl_nodeid"]

    if not nodeid:
        demisto.results(f"IP not found. [{IP}] is not exist in your network")
    else:
        result2 = get_tag_list()

        tag_check = "tag_not_exists"
        for a in result2["result"]:
            if a["NP_NAME"] == TAG_NAME:
                tag_check = a["NP_IDX"]
                break

        if tag_check != "tag_not_exists":
            if int(tag_check):
                data = '["' + str(tag_check) + '"]'
                result3 = unassign_ip_tag(nodeid, data)
                if str(result3) == "[]":
                    hr = f"IP : [{IP}], [{TAG_NAME}] Tag unassign success."
                    unassign_tag = {"nodeId": nodeid, "Name": TAG_NAME}
                    demisto.results(
                        {
                            "Type": entryTypes["note"],
                            "ContentsFormat": formats["json"],
                            "Contents": result3,
                            "ReadableContentsFormat": formats["text"],
                            "HumanReadable": hr,
                            "EntryContext": {"genians.tag.(val.Tag == obj.Tag)": unassign_tag},
                        }
                    )
                else:
                    raise Exception(f"IP : [{IP}], [{TAG_NAME}] Tag unassign fail.")
            else:
                demisto.results(f"[{TAG_NAME}] Tag not found.")
        else:
            demisto.results(f"[{TAG_NAME}] Tag not found.")


def main():
    """Main execution block"""
    try:
        LOG(f"Command being called is {demisto.command()}")

        if demisto.command() == "test-module":
            get_ip_nodeid("8.8.8.8")
            demisto.results("ok")
        elif demisto.command() == "genians-assign-ip-tag":
            assign_ip_tag_command()
        elif demisto.command() == "genians-unassign-ip-tag":
            unassign_ip_tag_command()
        else:
            raise NotImplementedError(f"Command {demisto.command()} was not implemented.")

    except Exception as e:
        return_error(str(e))

    finally:
        LOG.print_log()


# python2 uses __builtin__ python3 uses builtins
if __name__ == "__builtin__" or __name__ == "builtins":
    main()