You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
jumpserver/apps/terminal/signal_handlers/applet.py

110 lines
3.6 KiB

from django.db.models.signals import post_save, post_delete
from django.dispatch import receiver
from django.utils.functional import LazyObject
from accounts.const import AliasAccount
from accounts.models import Account, VirtualAccount
from common.decorators import on_transaction_commit
from common.signals import django_ready
from common.utils import get_logger
from common.utils.connection import RedisPubSub
from orgs.utils import tmp_to_builtin_org
from users.models import User
from ..models import Applet, AppletHost
from ..tasks import applet_host_generate_accounts
from ..utils import DBPortManager
db_port_manager: DBPortManager
logger = get_logger(__file__)
@receiver(post_save, sender=AppletHost)
@on_transaction_commit
def on_applet_host_create(sender, instance, created=False, **kwargs):
if not created:
return
# 新建时,清除原来的首选,避免一直调度到一个上面
Applet.clear_host_prefer()
applets = Applet.objects.all()
instance.applets.set(applets)
applet_host_change_pub_sub.publish(True)
@receiver(post_save, sender=AppletHost)
@on_transaction_commit
def on_applet_host_update_or_create(sender, instance, created=False, **kwargs):
if instance.auto_create_accounts:
applet_host_generate_accounts.delay(instance.id)
# 使用同名账号的,直接给他打开登录那项吧
if instance.using_same_account:
alias = AliasAccount.USER.value
same_account, __ = VirtualAccount.objects.get_or_create(
alias=alias, defaults={'alias': alias, 'secret_from_login': True}
)
if same_account.secret_from_login:
return
same_account.secret_from_login = True
same_account.save(update_fields=['secret_from_login'])
@receiver(post_save, sender=User)
def on_user_create_create_account(sender, instance: User, created=False, **kwargs):
if not created:
return
if instance.is_service_account:
return
with tmp_to_builtin_org(system=1):
applet_hosts = AppletHost.objects.all()
for host in applet_hosts:
if not host.auto_create_accounts:
continue
host.generate_private_accounts_by_usernames([instance.username])
@receiver(post_delete, sender=User)
def on_user_delete_remove_account(sender, instance, **kwargs):
account_username = 'js_{}'.format(instance.username)
with tmp_to_builtin_org(system=1):
applet_hosts = AppletHost.objects.all().values_list('id', flat=True)
accounts = Account.objects.filter(asset_id__in=applet_hosts, username=account_username)
accounts.delete()
@receiver(post_delete, sender=AppletHost)
def on_applet_host_delete(sender, instance, **kwargs):
applet_host_change_pub_sub.publish(True)
@receiver(post_save, sender=Applet)
def on_applet_create(sender, instance, created=False, **kwargs):
if not created:
return
hosts = AppletHost.objects.all()
instance.hosts.set(hosts)
applet_host_change_pub_sub.publish(True)
@receiver(post_delete, sender=Applet)
def on_applet_delete(sender, instance, **kwargs):
applet_host_change_pub_sub.publish(True)
class AppletHostPubSub(LazyObject):
def _setup(self):
self._wrapped = RedisPubSub('fm.applet_host_change')
@receiver(django_ready)
def subscribe_applet_host_change(sender, **kwargs):
logger.debug("Start subscribe for expire node assets id mapping from memory")
def on_change(message):
from terminal.connect_methods import ConnectMethodUtil
ConnectMethodUtil.refresh_methods()
applet_host_change_pub_sub.subscribe(on_change)
applet_host_change_pub_sub = AppletHostPubSub()