login type and checks

Author: JanCaha

mergin/client.py

@@ -52,6 +52,16 @@ class ServerType(Enum):
     SAAS = auto()  # Server is SaaS
 
 
+class LoginType(Enum):
+    """Types of login supported by Mergin Maps."""
+
+    PASSWORD = "password"  # classic login with username and password
+    SSO = "sso"  # login with SSO token
+
+    def __str__(self) -> str:
+        return self.value
+
+
 def decode_token_data(token):
     token_prefix = "Bearer ."
     if not token.startswith(token_prefix):
@@ -80,14 +90,24 @@ class MerginClient:
         Currently, only HTTP proxies are supported.
     """
 
-    def __init__(self, url=None, auth_token=None, login=None, password=None, plugin_version=None, proxy_config=None):
+    def __init__(
+        self,
+        url=None,
+        auth_token=None,
+        login=None,
+        password=None,
+        plugin_version=None,
+        proxy_config=None,
+        login_type: LoginType = LoginType.PASSWORD,
+    ):
         self.url = url if url is not None else MerginClient.default_url()
         self._auth_params = None
         self._auth_session = None
         self._user_info = None
         self._server_type = None
         self._server_version = None
         self.client_version = "Python-client/" + __version__
+        self._login_type = login_type
         if plugin_version is not None:  # this could be e.g. "Plugin/2020.1 QGIS/3.14"
             self.client_version += " " + plugin_version
         self.setup_logging()
@@ -134,15 +154,20 @@ def __init__(self, url=None, auth_token=None, login=None, password=None, plugin_
             self.opener = urllib.request.build_opener(*handlers, https_handler)
         urllib.request.install_opener(self.opener)
 
-        if login and not password:
-            raise ClientError("Unable to log in: no password provided for '{}'".format(login))
-        if password and not login:
-            raise ClientError("Unable to log in: password provided but no username/email")
+        if self._login_type == LoginType.PASSWORD:
+            if login and not password:
+                raise ClientError("Unable to log in: no password provided for '{}'".format(login))
+            if password and not login:
+                raise ClientError("Unable to log in: password provided but no username/email")
+
+            if login and password:
+                self._auth_params = {"login": login, "password": password}
+                if not self._auth_session:
+                    self.login(login, password)
 
-        if login and password:
-            self._auth_params = {"login": login, "password": password}
+        elif self._login_type == LoginType.SSO:
             if not self._auth_session:
-                self.login(login, password)
+                raise ClientError("Unable to log in: no auth token provided for SSO login")
 
     def setup_logging(self):
         """Setup Mergin Maps client logging."""