![gcp-cherry-pick-bot[bot]](/assets/img/avatar_default.png)
events: sanitize args and kwargs saved in system tasks (#8644) Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens L <jens@goauthentik.io>
153 lines
5.4 KiB
Python
153 lines
5.4 KiB
Python
"""Monitored tasks"""
|
|
|
|
from datetime import datetime, timedelta
|
|
from time import perf_counter
|
|
from typing import Any, Optional
|
|
|
|
from django.utils.timezone import now
|
|
from django.utils.translation import gettext_lazy as _
|
|
from structlog.stdlib import get_logger
|
|
from tenant_schemas_celery.task import TenantTask
|
|
|
|
from authentik.events.models import Event, EventAction
|
|
from authentik.events.models import SystemTask as DBSystemTask
|
|
from authentik.events.models import TaskStatus
|
|
from authentik.events.utils import sanitize_item
|
|
from authentik.lib.utils.errors import exception_to_string
|
|
|
|
LOGGER = get_logger()
|
|
|
|
|
|
class SystemTask(TenantTask):
|
|
"""Task which can save its state to the cache"""
|
|
|
|
# For tasks that should only be listed if they failed, set this to False
|
|
save_on_success: bool
|
|
|
|
_status: TaskStatus
|
|
_messages: list[str]
|
|
|
|
_uid: Optional[str]
|
|
# Precise start time from perf_counter
|
|
_start_precise: Optional[float] = None
|
|
_start: Optional[datetime] = None
|
|
|
|
def __init__(self, *args, **kwargs) -> None:
|
|
super().__init__(*args, **kwargs)
|
|
self._status = TaskStatus.SUCCESSFUL
|
|
self.save_on_success = True
|
|
self._uid = None
|
|
self._status = None
|
|
self._messages = []
|
|
self.result_timeout_hours = 6
|
|
|
|
def set_uid(self, uid: str):
|
|
"""Set UID, so in the case of an unexpected error its saved correctly"""
|
|
self._uid = uid
|
|
|
|
def set_status(self, status: TaskStatus, *messages: str):
|
|
"""Set result for current run, will overwrite previous result."""
|
|
self._status = status
|
|
self._messages = messages
|
|
|
|
def set_error(self, exception: Exception):
|
|
"""Set result to error and save exception"""
|
|
self._status = TaskStatus.ERROR
|
|
self._messages = [exception_to_string(exception)]
|
|
|
|
def before_start(self, task_id, args, kwargs):
|
|
self._start_precise = perf_counter()
|
|
self._start = now()
|
|
return super().before_start(task_id, args, kwargs)
|
|
|
|
def db(self) -> Optional[DBSystemTask]:
|
|
"""Get DB object for latest task"""
|
|
return DBSystemTask.objects.filter(
|
|
name=self.__name__,
|
|
uid=self._uid,
|
|
).first()
|
|
|
|
# pylint: disable=too-many-arguments
|
|
def after_return(self, status, retval, task_id, args: list[Any], kwargs: dict[str, Any], einfo):
|
|
super().after_return(status, retval, task_id, args, kwargs, einfo=einfo)
|
|
if not self._status:
|
|
return
|
|
if self._status == TaskStatus.SUCCESSFUL and not self.save_on_success:
|
|
DBSystemTask.objects.filter(
|
|
name=self.__name__,
|
|
uid=self._uid,
|
|
).delete()
|
|
return
|
|
DBSystemTask.objects.update_or_create(
|
|
name=self.__name__,
|
|
uid=self._uid,
|
|
defaults={
|
|
"description": self.__doc__,
|
|
"start_timestamp": self._start or now(),
|
|
"finish_timestamp": now(),
|
|
"duration": max(perf_counter() - self._start_precise, 0),
|
|
"task_call_module": self.__module__,
|
|
"task_call_func": self.__name__,
|
|
"task_call_args": sanitize_item(args),
|
|
"task_call_kwargs": sanitize_item(kwargs),
|
|
"status": self._status,
|
|
"messages": sanitize_item(self._messages),
|
|
"expires": now() + timedelta(hours=self.result_timeout_hours),
|
|
"expiring": True,
|
|
},
|
|
)
|
|
|
|
# pylint: disable=too-many-arguments
|
|
def on_failure(self, exc, task_id, args, kwargs, einfo):
|
|
super().on_failure(exc, task_id, args, kwargs, einfo=einfo)
|
|
if not self._status:
|
|
self._status = TaskStatus.ERROR
|
|
self._messages = exception_to_string(exc)
|
|
DBSystemTask.objects.update_or_create(
|
|
name=self.__name__,
|
|
uid=self._uid,
|
|
defaults={
|
|
"description": self.__doc__,
|
|
"start_timestamp": self._start or now(),
|
|
"finish_timestamp": now(),
|
|
"duration": max(perf_counter() - self._start_precise, 0),
|
|
"task_call_module": self.__module__,
|
|
"task_call_func": self.__name__,
|
|
"task_call_args": sanitize_item(args),
|
|
"task_call_kwargs": sanitize_item(kwargs),
|
|
"status": self._status,
|
|
"messages": sanitize_item(self._messages),
|
|
"expires": now() + timedelta(hours=self.result_timeout_hours),
|
|
"expiring": True,
|
|
},
|
|
)
|
|
Event.new(
|
|
EventAction.SYSTEM_TASK_EXCEPTION,
|
|
message=f"Task {self.__name__} encountered an error: {exception_to_string(exc)}",
|
|
).save()
|
|
|
|
def run(self, *args, **kwargs):
|
|
raise NotImplementedError
|
|
|
|
|
|
def prefill_task(func):
|
|
"""Ensure a task's details are always in cache, so it can always be triggered via API"""
|
|
_prefill_tasks.append(
|
|
DBSystemTask(
|
|
name=func.__name__,
|
|
description=func.__doc__,
|
|
start_timestamp=now(),
|
|
finish_timestamp=now(),
|
|
status=TaskStatus.UNKNOWN,
|
|
messages=sanitize_item([_("Task has not been run yet.")]),
|
|
task_call_module=func.__module__,
|
|
task_call_func=func.__name__,
|
|
expiring=False,
|
|
duration=0,
|
|
)
|
|
)
|
|
return func
|
|
|
|
|
|
_prefill_tasks = []
|