scripts: sanity/dns/wallet-cli helpers; ops cleanup

scripts/taler-sanity/lib.sh

@@ -0,0 +1,60 @@
+# shellcheck shell=bash
+# Common helpers for Taler sanity checks (run on koopa host as root).
+# shellcheck disable=SC2034
+
+: "${BANK_URL:=http://127.0.0.1:9012}"
+: "${MERCHANT_URL:=https://127.0.0.1:9010}"
+: "${EXCHANGE_PUBLIC:=https://exchange.hacktivism.ch}"
+: "${BANK_PUBLIC:=https://bank.hacktivism.ch}"
+: "${MERCHANT_PUBLIC:=https://taler.hacktivism.ch}"
+
+pass() { echo "OK  $*"; }
+fail() { echo "FAIL $*"; FAILS=$((FAILS + 1)); }
+warn() { echo "WARN $*"; }
+info() { echo "INFO $*"; }
+
+FAILS=0
+
+need_root() {
+  if [ "$(id -u)" -ne 0 ]; then
+    echo "This check expects root on koopa (password files under /root)." >&2
+    exit 2
+  fi
+}
+
+read_pw() {
+  # read_pw VAR path
+  local _v="$1" _p="$2"
+  if [ ! -f "$_p" ]; then
+    eval "$_v="
+    return 1
+  fi
+  eval "$_v=\$(tr -d '\\n' <\"$_p\")"
+}
+
+bank_token() {
+  # bank_token USER PASS -> prints access_token
+  local user="$1" pass="$2"
+  curl -sS -m 15 -u "${user}:${pass}" \
+    -H 'Content-Type: application/json' \
+    -d '{"scope":"readwrite","refreshable":true}' \
+    "${BANK_URL}/accounts/${user}/token" \
+    | python3 -c 'import sys,json; print(json.load(sys.stdin).get("access_token",""))'
+}
+
+merchant_auth_header() {
+  # merchant_auth_header PASSWORD
+  printf 'Authorization: Bearer secret-token:%s' "$1"
+}
+
+http_code() {
+  # http_code URL [curl args...]
+  local url="$1"
+  shift
+  curl -sk -m 12 -o /dev/null -w '%{http_code}' "$@" "$url" 2>/dev/null || echo "000"
+}
+
+json_get() {
+  # json_get FILE python-expr-on-d
+  python3 -c "import json,sys; d=json.load(open(sys.argv[1])); print($2)" "$1"
+}