57 lines
2.1 KiB
Python
57 lines
2.1 KiB
Python
"""SCIM provider signals"""
|
|
|
|
from django.db.models import Model
|
|
from django.db.models.signals import m2m_changed, post_save, pre_delete
|
|
from django.dispatch import receiver
|
|
from pydanticscim.responses import PatchOp
|
|
from structlog.stdlib import get_logger
|
|
|
|
from authentik.core.models import Group, User
|
|
from authentik.lib.utils.reflection import class_to_path
|
|
from authentik.providers.scim.models import SCIMProvider
|
|
from authentik.providers.scim.tasks import scim_signal_direct, scim_signal_m2m, scim_task_wrapper
|
|
|
|
LOGGER = get_logger()
|
|
|
|
|
|
@receiver(post_save, sender=SCIMProvider)
|
|
def post_save_provider(sender: type[Model], instance, created: bool, **_):
|
|
"""Trigger sync when SCIM provider is saved"""
|
|
scim_task_wrapper(instance.pk)
|
|
|
|
|
|
@receiver(post_save, sender=User)
|
|
@receiver(post_save, sender=Group)
|
|
def post_save_scim(sender: type[Model], instance: User | Group, created: bool, **_):
|
|
"""Post save handler"""
|
|
if not SCIMProvider.objects.filter(backchannel_application__isnull=False).exists():
|
|
return
|
|
scim_signal_direct.delay(class_to_path(instance.__class__), instance.pk, PatchOp.add.value)
|
|
|
|
|
|
@receiver(pre_delete, sender=User)
|
|
@receiver(pre_delete, sender=Group)
|
|
def pre_delete_scim(sender: type[Model], instance: User | Group, **_):
|
|
"""Pre-delete handler"""
|
|
if not SCIMProvider.objects.filter(backchannel_application__isnull=False).exists():
|
|
return
|
|
scim_signal_direct.delay(class_to_path(instance.__class__), instance.pk, PatchOp.remove.value)
|
|
|
|
|
|
@receiver(m2m_changed, sender=User.ak_groups.through)
|
|
def m2m_changed_scim(
|
|
sender: type[Model], instance, action: str, pk_set: set, reverse: bool, **kwargs
|
|
):
|
|
"""Sync group membership"""
|
|
if action not in ["post_add", "post_remove"]:
|
|
return
|
|
if not SCIMProvider.objects.filter(backchannel_application__isnull=False).exists():
|
|
return
|
|
# reverse: instance is a Group, pk_set is a list of user pks
|
|
# non-reverse: instance is a User, pk_set is a list of groups
|
|
if reverse:
|
|
scim_signal_m2m.delay(str(instance.pk), action, list(pk_set))
|
|
else:
|
|
for group_pk in pk_set:
|
|
scim_signal_m2m.delay(group_pk, action, [instance.pk])
|