# Copyright (c) 2015 Ansible, Inc. # All Rights Reserved. import logging import threading import uuid from django.conf import settings from django.contrib.auth.models import User from django.db.models.signals import post_save from django.db import IntegrityError from django.utils.functional import curry from awx.main.models import ActivityStream from awx.api.authentication import TokenAuthentication logger = logging.getLogger('awx.main.middleware') analytics_logger = logging.getLogger('awx.analytics.activity_stream') class ActivityStreamMiddleware(threading.local): def __init__(self): self.disp_uid = None self.instance_ids = [] def process_request(self, request): if hasattr(request, 'user') and hasattr(request.user, 'is_authenticated') and request.user.is_authenticated(): user = request.user else: user = None set_actor = curry(self.set_actor, user) self.disp_uid = str(uuid.uuid1()) self.instance_ids = [] post_save.connect(set_actor, sender=ActivityStream, dispatch_uid=self.disp_uid, weak=False) def process_response(self, request, response): drf_request = getattr(request, 'drf_request', None) drf_user = getattr(drf_request, 'user', None) if self.disp_uid is not None: post_save.disconnect(dispatch_uid=self.disp_uid) for instance in ActivityStream.objects.filter(id__in=self.instance_ids): if drf_user and drf_user.id: instance.actor = drf_user try: instance.save(update_fields=['actor']) analytics_logger.info('Activity Stream update entry for %s' % str(instance.object1), extra=dict(changes=instance.changes, relationship=instance.object_relationship_type, actor=drf_user.username, operation=instance.operation, object1=instance.object1, object2=instance.object2)) except IntegrityError: logger.debug("Integrity Error saving Activity Stream instance for id : " + str(instance.id)) # else: # obj1_type_actual = instance.object1_type.split(".")[-1] # if obj1_type_actual in ("InventoryUpdate", "ProjectUpdate", "Job") and instance.id is not None: # instance.delete() self.instance_ids = [] return response def set_actor(self, user, sender, instance, **kwargs): if sender == ActivityStream: if isinstance(user, User) and instance.actor is None: user = User.objects.filter(id=user.id) if user.exists(): user = user[0] instance.actor = user else: if instance.id not in self.instance_ids: self.instance_ids.append(instance.id) class AuthTokenTimeoutMiddleware(object): """Presume that when the user includes the auth header, they go through the authentication mechanism. Further, that mechanism is presumed to extend the users session validity time by AUTH_TOKEN_EXPIRATION. If the auth token is not supplied, then don't include the header """ def process_response(self, request, response): if not TokenAuthentication._get_x_auth_token_header(request): return response response['Auth-Token-Timeout'] = int(settings.AUTH_TOKEN_EXPIRATION) return response