98 lines
3.1 KiB
Python
98 lines
3.1 KiB
Python
"""Outpost websocket handler"""
|
|
from dataclasses import asdict, dataclass, field
|
|
from datetime import datetime
|
|
from enum import IntEnum
|
|
from typing import Any, Optional
|
|
|
|
from channels.exceptions import DenyConnection
|
|
from dacite import from_dict
|
|
from dacite.data import Data
|
|
from guardian.shortcuts import get_objects_for_user
|
|
from structlog.stdlib import get_logger
|
|
|
|
from authentik.core.channels import AuthJsonConsumer
|
|
from authentik.outposts.models import OUTPOST_HELLO_INTERVAL, Outpost, OutpostState
|
|
|
|
LOGGER = get_logger()
|
|
|
|
|
|
class WebsocketMessageInstruction(IntEnum):
|
|
"""Commands which can be triggered over Websocket"""
|
|
|
|
# Simple message used by either side when a message is acknowledged
|
|
ACK = 0
|
|
|
|
# Message used by outposts to report their alive status
|
|
HELLO = 1
|
|
|
|
# Message sent by us to trigger an Update
|
|
TRIGGER_UPDATE = 2
|
|
|
|
|
|
@dataclass
|
|
class WebsocketMessage:
|
|
"""Complete Websocket Message that is being sent"""
|
|
|
|
instruction: int
|
|
args: dict[str, Any] = field(default_factory=dict)
|
|
|
|
|
|
class OutpostConsumer(AuthJsonConsumer):
|
|
"""Handler for Outposts that connect over websockets for health checks and live updates"""
|
|
|
|
outpost: Optional[Outpost] = None
|
|
|
|
def connect(self):
|
|
super().connect()
|
|
uuid = self.scope["url_route"]["kwargs"]["pk"]
|
|
outpost = get_objects_for_user(
|
|
self.user, "authentik_outposts.view_outpost"
|
|
).filter(pk=uuid)
|
|
if not outpost.exists():
|
|
raise DenyConnection()
|
|
self.accept()
|
|
self.outpost = outpost.first()
|
|
OutpostState(
|
|
uid=self.channel_name, last_seen=datetime.now(), _outpost=self.outpost
|
|
).save(timeout=OUTPOST_HELLO_INTERVAL * 1.5)
|
|
LOGGER.debug(
|
|
"added outpost instace to cache",
|
|
outpost=self.outpost,
|
|
channel_name=self.channel_name,
|
|
)
|
|
|
|
# pylint: disable=unused-argument
|
|
def disconnect(self, close_code):
|
|
if self.outpost:
|
|
OutpostState.for_channel(self.outpost, self.channel_name).delete()
|
|
LOGGER.debug(
|
|
"removed outpost instance from cache",
|
|
outpost=self.outpost,
|
|
channel_name=self.channel_name,
|
|
)
|
|
|
|
def receive_json(self, content: Data):
|
|
msg = from_dict(WebsocketMessage, content)
|
|
state = OutpostState(
|
|
uid=self.channel_name,
|
|
last_seen=datetime.now(),
|
|
_outpost=self.outpost,
|
|
)
|
|
if msg.instruction == WebsocketMessageInstruction.HELLO:
|
|
state.version = msg.args.get("version", None)
|
|
elif msg.instruction == WebsocketMessageInstruction.ACK:
|
|
return
|
|
state.save(timeout=OUTPOST_HELLO_INTERVAL * 1.5)
|
|
|
|
response = WebsocketMessage(instruction=WebsocketMessageInstruction.ACK)
|
|
self.send_json(asdict(response))
|
|
|
|
# pylint: disable=unused-argument
|
|
def event_update(self, event):
|
|
"""Event handler which is called by post_save signals, Send update instruction"""
|
|
self.send_json(
|
|
asdict(
|
|
WebsocketMessage(instruction=WebsocketMessageInstruction.TRIGGER_UPDATE)
|
|
)
|
|
)
|