597ce1eb42
This reverts commit ff481ba6e7.
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
# Conflicts:
# authentik/flows/views/executor.py
# authentik/policies/signals.py
74 lines
2.4 KiB
Python
74 lines
2.4 KiB
Python
"""authentik core signals"""
|
|
from typing import TYPE_CHECKING, Type
|
|
|
|
from django.contrib.auth.signals import user_logged_in, user_logged_out
|
|
from django.contrib.sessions.backends.cache import KEY_PREFIX
|
|
from django.core.cache import cache
|
|
from django.core.signals import Signal
|
|
from django.db.models import Model
|
|
from django.db.models.signals import post_save, pre_delete
|
|
from django.dispatch import receiver
|
|
from django.http.request import HttpRequest
|
|
from prometheus_client import Gauge
|
|
|
|
# Arguments: user: User, password: str
|
|
password_changed = Signal()
|
|
|
|
GAUGE_MODELS = Gauge("authentik_models", "Count of various objects", ["model_name", "app"])
|
|
|
|
if TYPE_CHECKING:
|
|
from authentik.core.models import AuthenticatedSession, User
|
|
|
|
|
|
@receiver(post_save)
|
|
# pylint: disable=unused-argument
|
|
def post_save_application(sender: type[Model], instance, created: bool, **_):
|
|
"""Clear user's application cache upon application creation"""
|
|
from authentik.core.api.applications import user_app_cache_key
|
|
from authentik.core.models import Application
|
|
|
|
GAUGE_MODELS.labels(
|
|
model_name=sender._meta.model_name,
|
|
app=sender._meta.app_label,
|
|
).set(sender.objects.count())
|
|
|
|
if sender != Application:
|
|
return
|
|
if not created: # pragma: no cover
|
|
return
|
|
# Also delete user application cache
|
|
keys = cache.keys(user_app_cache_key("*"))
|
|
cache.delete_many(keys)
|
|
|
|
|
|
@receiver(user_logged_in)
|
|
# pylint: disable=unused-argument
|
|
def user_logged_in_session(sender, request: HttpRequest, user: "User", **_):
|
|
"""Create an AuthenticatedSession from request"""
|
|
from authentik.core.models import AuthenticatedSession
|
|
|
|
session = AuthenticatedSession.from_request(request, user)
|
|
if session:
|
|
session.save()
|
|
|
|
|
|
@receiver(user_logged_out)
|
|
# pylint: disable=unused-argument
|
|
def user_logged_out_session(sender, request: HttpRequest, user: "User", **_):
|
|
"""Delete AuthenticatedSession if it exists"""
|
|
from authentik.core.models import AuthenticatedSession
|
|
|
|
AuthenticatedSession.objects.filter(session_key=request.session.session_key).delete()
|
|
|
|
|
|
@receiver(pre_delete)
|
|
def authenticated_session_delete(sender: Type[Model], instance: "AuthenticatedSession", **_):
|
|
"""Delete session when authenticated session is deleted"""
|
|
from authentik.core.models import AuthenticatedSession
|
|
|
|
if sender != AuthenticatedSession:
|
|
return
|
|
|
|
cache_key = f"{KEY_PREFIX}{instance.session_key}"
|
|
cache.delete(cache_key)
|