fix: fix missing CSR support in pool route of enrollment creation

Author: rambo

src/rasenmaeher_api/db/enrollments.py

@@ -52,13 +52,13 @@ async def by_pk_or_invitecode(cls, inval: Union[str, uuid.UUID], allow_deleted:
         except ValueError:
             return await cls.by_invitecode(str(inval), allow_deleted)
 
-    async def create_enrollment(self, callsign: str) -> "Enrollment":
+    async def create_enrollment(self, callsign: str, csr: Optional[str] = None) -> "Enrollment":
         """Create enrollment from this pool"""
         if not self.active:
             raise PoolInactive()
         if self.deleted:
             raise Deleted("Can't create enrollments on deleted pools")
-        return await Enrollment.create_for_callsign(callsign, self, self.extra)
+        return await Enrollment.create_for_callsign(callsign, self, self.extra, csr)
 
     async def set_active(self, state: bool) -> "EnrollmentPool":
         """Set active and return refreshed object"""

src/rasenmaeher_api/web/api/enrollment/schema.py

@@ -422,6 +422,7 @@ class EnrollmentInviteCodeEnrollIn(BaseModel):
 
     invite_code: str
     callsign: str
+    csr: Optional[str] = Field(description="CSR for mTLS key in PEM format", default=None)
 
     class Config:  # pylint: disable=too-few-public-methods
         """Example values for schema"""

src/rasenmaeher_api/web/api/enrollment/views.py

@@ -416,7 +416,7 @@ async def post_enroll_invite_code(
     except NotFound:
         pass
 
-    enrollment = await obj.create_enrollment(callsign=request_in.callsign)
+    enrollment = await obj.create_enrollment(callsign=request_in.callsign, csr=request_in.csr)
 
     # Create JWT token for user
     claims = {"sub": request_in.callsign}