jumpserver/apps/terminal/api/session/sharing.py

from django.conf import settings
from django.utils.translation import gettext_lazy as _
from rest_framework.decorators import action
from rest_framework.exceptions import MethodNotAllowed, ValidationError
from rest_framework.response import Response

from common.const.http import PATCH
from orgs.mixins.api import OrgModelViewSet
from terminal import serializers, models

__all__ = ['SessionSharingViewSet', 'SessionJoinRecordsViewSet']


class SessionSharingViewSet(OrgModelViewSet):
    serializer_class = serializers.SessionSharingSerializer
    search_fields = ('session', 'creator', 'is_active', 'expired_time')
    filterset_fields = search_fields
    model = models.SessionSharing
    rbac_perms = {
        'create': 'terminal.add_supersessionsharing',
    }

    def get_queryset(self):
        queryset = models.SessionSharing.objects.filter(creator=self.request.user)
        return queryset

    def dispatch(self, request, *args, **kwargs):
        if not settings.SECURITY_SESSION_SHARE:
            detail = _('Secure session sharing settings is disabled')
            raise MethodNotAllowed(self.action, detail=detail)
        return super().dispatch(request, *args, **kwargs)

    def destroy(self, request, *args, **kwargs):
        raise MethodNotAllowed(self.action)


class SessionJoinRecordsViewSet(OrgModelViewSet):
    serializer_class = serializers.SessionJoinRecordSerializer
    search_fields = (
        'sharing', 'session', 'joiner', 'date_joined', 'date_left',
        'login_from', 'is_success', 'is_finished'
    )
    filterset_fields = search_fields
    model = models.SessionJoinRecord
    rbac_perms = {
        'finished': 'terminal.change_sessionjoinrecord'
    }

    def create(self, request, *args, **kwargs):
        try:
            response = super().create(request, *args, **kwargs)
        except ValidationError as e:
            error = e.args[0] if e.args else ''
            response = Response(
                data={'error': str(error)}, status=e.status_code
            )
        return response

    def perform_create(self, serializer):
        instance = serializer.save()
        self.can_join(instance)

    @staticmethod
    def can_join(instance):
        can_join, reason = instance.can_join()
        if not can_join:
            instance.join_failed(reason=reason)
            raise ValidationError(reason)

    @action(methods=[PATCH], detail=True)
    def finished(self, request, *args, **kwargs):
        instance = self.get_object()
        instance.finished()
        return Response(data={'msg': 'ok'})

    def destroy(self, request, *args, **kwargs):
        raise MethodNotAllowed(self.action)