74 lines
2.5 KiB
Python
74 lines
2.5 KiB
Python
"""authentik core tasks"""
|
|
from datetime import datetime, timedelta
|
|
|
|
from django.contrib.sessions.backends.cache import KEY_PREFIX
|
|
from django.core.cache import cache
|
|
from django.utils.timezone import now
|
|
from structlog.stdlib import get_logger
|
|
|
|
from authentik.core.models import (
|
|
USER_ATTRIBUTE_EXPIRES,
|
|
USER_ATTRIBUTE_GENERATED,
|
|
AuthenticatedSession,
|
|
ExpiringModel,
|
|
User,
|
|
)
|
|
from authentik.events.monitored_tasks import (
|
|
MonitoredTask,
|
|
TaskResult,
|
|
TaskResultStatus,
|
|
prefill_task,
|
|
)
|
|
from authentik.root.celery import CELERY_APP
|
|
|
|
LOGGER = get_logger()
|
|
|
|
|
|
@CELERY_APP.task(bind=True, base=MonitoredTask)
|
|
@prefill_task
|
|
def clean_expired_models(self: MonitoredTask):
|
|
"""Remove expired objects"""
|
|
messages = []
|
|
for cls in ExpiringModel.__subclasses__():
|
|
cls: ExpiringModel
|
|
objects = (
|
|
cls.objects.all().exclude(expiring=False).exclude(expiring=True, expires__gt=now())
|
|
)
|
|
amount = objects.count()
|
|
for obj in objects:
|
|
obj.expire_action()
|
|
LOGGER.debug("Expired models", model=cls, amount=amount)
|
|
messages.append(f"Expired {amount} {cls._meta.verbose_name_plural}")
|
|
# Special case
|
|
amount = 0
|
|
for session in AuthenticatedSession.objects.all():
|
|
cache_key = f"{KEY_PREFIX}{session.session_key}"
|
|
value = cache.get(cache_key)
|
|
if not value:
|
|
session.delete()
|
|
amount += 1
|
|
LOGGER.debug("Expired sessions", model=AuthenticatedSession, amount=amount)
|
|
messages.append(f"Expired {amount} {AuthenticatedSession._meta.verbose_name_plural}")
|
|
self.set_status(TaskResult(TaskResultStatus.SUCCESSFUL, messages))
|
|
|
|
|
|
@CELERY_APP.task(bind=True, base=MonitoredTask)
|
|
@prefill_task
|
|
def clean_temporary_users(self: MonitoredTask):
|
|
"""Remove temporary users created by SAML Sources"""
|
|
_now = datetime.now()
|
|
messages = []
|
|
deleted_users = 0
|
|
for user in User.objects.filter(**{f"attributes__{USER_ATTRIBUTE_GENERATED}": True}):
|
|
if not user.attributes.get(USER_ATTRIBUTE_EXPIRES):
|
|
continue
|
|
delta: timedelta = _now - datetime.fromtimestamp(
|
|
user.attributes.get(USER_ATTRIBUTE_EXPIRES)
|
|
)
|
|
if delta.total_seconds() > 0:
|
|
LOGGER.debug("User is expired and will be deleted.", user=user, delta=delta)
|
|
user.delete()
|
|
deleted_users += 1
|
|
messages.append(f"Successfully deleted {deleted_users} users.")
|
|
self.set_status(TaskResult(TaskResultStatus.SUCCESSFUL, messages))
|