f90d6bb3d9
* providers/oauth2: fix amr claim not set due to login event not associated Signed-off-by: Jens Langhammer <jens@goauthentik.io> * add sid claim Signed-off-by: Jens Langhammer <jens@goauthentik.io> * import engine only once Signed-off-by: Jens Langhammer <jens@goauthentik.io> * remove manual sid extraction from proxy, add test, make session key hashing more obvious Signed-off-by: Jens Langhammer <jens@goauthentik.io> * unrelated string fix Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix tests Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Jens Langhammer <jens@goauthentik.io> # Conflicts: # tests/e2e/test_provider_proxy.py
39 lines
1.3 KiB
Python
39 lines
1.3 KiB
Python
"""proxy provider tasks"""
|
|
|
|
from asgiref.sync import async_to_sync
|
|
from channels.layers import get_channel_layer
|
|
from django.db import DatabaseError, InternalError, ProgrammingError
|
|
|
|
from authentik.outposts.consumer import OUTPOST_GROUP
|
|
from authentik.outposts.models import Outpost, OutpostType
|
|
from authentik.providers.oauth2.id_token import hash_session_key
|
|
from authentik.providers.proxy.models import ProxyProvider
|
|
from authentik.root.celery import CELERY_APP
|
|
|
|
|
|
@CELERY_APP.task(
|
|
throws=(DatabaseError, ProgrammingError, InternalError),
|
|
)
|
|
def proxy_set_defaults():
|
|
"""Ensure correct defaults are set for all providers"""
|
|
for provider in ProxyProvider.objects.all():
|
|
provider.set_oauth_defaults()
|
|
provider.save()
|
|
|
|
|
|
@CELERY_APP.task()
|
|
def proxy_on_logout(session_id: str):
|
|
"""Update outpost instances connected to a single outpost"""
|
|
layer = get_channel_layer()
|
|
hashed_session_id = hash_session_key(session_id)
|
|
for outpost in Outpost.objects.filter(type=OutpostType.PROXY):
|
|
group = OUTPOST_GROUP % {"outpost_pk": str(outpost.pk)}
|
|
async_to_sync(layer.group_send)(
|
|
group,
|
|
{
|
|
"type": "event.provider.specific",
|
|
"sub_type": "logout",
|
|
"session_id": hashed_session_id,
|
|
},
|
|
)
|