				# Copyright (C) 2020-2021 The Software Heritage developers
				anlambertUnsubmitted Not Done Inline Actions I think it will be better to create a `swh.auth.django.models` module and put that model in it. In a similar manner, authentication backends should be put in a `swh.auth.django.backends` (in an other diff of course). anlambert: I think it will be better to create a `swh.auth.django.models` module and put that model in it.
				ardumontAuthorUnsubmitted Done Inline Actions I think it will be better to create a swh.auth.django.models module and put that model in it. ok In a similar manner, authentication backends should be put in a swh.auth.django.backends (in an other diff of course). Yes, although note i was not planning on adding the backends. ardumont: > I think it will be better to create a swh.auth.django.models module and put that model in it.
				# See the AUTHORS file at the top-level directory of this distribution
				# License: GNU Affero General Public License version 3, or any later version
				# See top-level LICENSE file for more information

				from datetime import datetime
				from typing import Optional, Set

				from django.contrib.auth.models import User


				class OIDCUser(User):
				"""
				Custom User proxy model for remote users storing OpenID Connect
				related data: profile containing authentication tokens.

				The model is also not saved to database as all users are already stored
				in the Keycloak one.
				"""

				# OIDC subject identifier
				sub: str = ""

				# OIDC tokens and session related data, only relevant when a user
				# authenticates from a web browser
				access_token: Optional[str] = None
				expires_at: Optional[datetime] = None
				id_token: Optional[str] = None
				refresh_token: Optional[str] = None
				refresh_expires_at: Optional[datetime] = None
				scope: Optional[str] = None
				session_state: Optional[str] = None

				# User permissions
				permissions: Set[str]

				class Meta:
				# TODO: To redefine in subclass of this class
				# Forced to empty otherwise, django complains about it
				# "Model class swh.auth.django.OIDCUser doesn't declare an explicit app_label
				# and isn't in an application in INSTALLED_APPS"
				app_label = ""
				proxy = True

				def save(self, **kwargs):
				"""
				Override django.db.models.Model.save to avoid saving the remote
				users to web application database.
				"""
				pass

				def get_group_permissions(self, obj=None) -> Set[str]:
				"""
				Override django.contrib.auth.models.PermissionsMixin.get_group_permissions
				to get permissions from OIDC
				"""
				return self.get_all_permissions(obj)

				def get_all_permissions(self, obj=None) -> Set[str]:
				"""
				Override django.contrib.auth.models.PermissionsMixin.get_all_permissions
				to get permissions from OIDC

				"""
				return self.permissions

				def has_perm(self, perm, obj=None) -> bool:
				"""
				Override django.contrib.auth.models.PermissionsMixin.has_perm
				to check permission from OIDC
				"""
				if self.is_active and self.is_superuser:
				return True

				return perm in self.permissions

				def has_module_perms(self, app_label) -> bool:
				"""
				Override django.contrib.auth.models.PermissionsMixin.has_module_perms
				to check permissions from OIDC.
				"""
				if self.is_active and self.is_superuser:
				return True

				return any(perm.startswith(app_label) for perm in self.permissions)

docker: Hide too verbose logs of prometheus-rabbitmq-exporter.ClosedPublicActions

Details

Diff Detail

Event Timeline

Revision ContentsChangeset List

Diff 11028

docker/docker-compose.yml

docker: Hide too verbose logs of prometheus-rabbitmq-exporter.
ClosedPublic
Actions

Revision Contents
Changeset List