cardo-python-utils 0.5.dev1__py3-none-any.whl → 0.5.dev2__py3-none-any.whl

{cardo_python_utils-0.5.dev1.dist-info → cardo_python_utils-0.5.dev2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cardo-python-utils
-Version: 0.5.dev1
+Version: 0.5.dev2
 Summary: Python library enhanced with a wide range of functions for different scenarios.
 Author-email: CardoAI <hello@cardoai.com>
 License: MIT
@@ -37,6 +37,9 @@ Requires-Dist: PyJWT; extra == "drf"
 Provides-Extra: django-admin-auth
 Requires-Dist: Django; extra == "django-admin-auth"
 Requires-Dist: mozilla-django-oidc>=4.0.1; extra == "django-admin-auth"
+Provides-Extra: django-keycloak-groups
+Requires-Dist: Django; extra == "django-keycloak-groups"
+Requires-Dist: python-keycloak>=5.8.1; extra == "django-keycloak-groups"
 Provides-Extra: all
 Requires-Dist: Django; extra == "all"
 Provides-Extra: dev

{cardo_python_utils-0.5.dev1.dist-info → cardo_python_utils-0.5.dev2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-cardo_python_utils-0.5.dev1.dist-info/licenses/LICENSE,sha256=N-YtxDy8n5A1Mo7JKKItNIlboiK_pMOZ48ojx76jo3g,1046
+cardo_python_utils-0.5.dev2.dist-info/licenses/LICENSE,sha256=N-YtxDy8n5A1Mo7JKKItNIlboiK_pMOZ48ojx76jo3g,1046
 python_utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 python_utils/choices.py,sha256=pu1fUBlem-Uz2J36FmDv-tzr0UqOSF00xIaF6cVOa4g,2505
 python_utils/data_structures.py,sha256=ZqkZYPy20zyGYOVhwb9qst4vF_P7X2A9z5E36rMUC6I,16820
@@ -14,8 +14,9 @@ python_utils/django/utils.py,sha256=lgLZLsUfdDJJmBYD2lqQDfiC9nDnT4oSIxVt3pKYIwI,
 python_utils/django/auth/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 python_utils/django/auth/admin.py,sha256=1zuqfvAXSKEEPvrdv7tYOG1x0namOIlJwPeHaF2f1EA,1517
 python_utils/django/auth/drf.py,sha256=k7KISe1FZzwaPOpQU6geoTvnTnaVHa5sBALClb_n4-4,3735
+python_utils/django/auth/keycloak.py,sha256=lUznzC_O4ar9R7iodwtSO9r9EjuJRM4NijN0JNq5AC0,4049
 python_utils/django/auth/ninja.py,sha256=h8O0otdOi6aUUDR4WXeh6OBfBMdeKl0_wF7CKrOtS_I,4237
-cardo_python_utils-0.5.dev1.dist-info/METADATA,sha256=KjJsod4NI_Sui9swL-3UQEJCLMVoP4BiMZaJBzxNIcE,3067
-cardo_python_utils-0.5.dev1.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-cardo_python_utils-0.5.dev1.dist-info/top_level.txt,sha256=zAx6OfEsjJs8BEW3okSiG_j9gpkI69xWShzum6oBgKI,13
-cardo_python_utils-0.5.dev1.dist-info/RECORD,,
+cardo_python_utils-0.5.dev2.dist-info/METADATA,sha256=l520dlJtZHjCDQJrRn4C1uSLFvZT0hcQmDwUc_QK41c,3236
+cardo_python_utils-0.5.dev2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+cardo_python_utils-0.5.dev2.dist-info/top_level.txt,sha256=zAx6OfEsjJs8BEW3okSiG_j9gpkI69xWShzum6oBgKI,13
+cardo_python_utils-0.5.dev2.dist-info/RECORD,,

python_utils/django/auth/keycloak.py

@@ -0,0 +1,119 @@
+from django.apps import apps
+from django.conf import settings
+from django.db import models
+from keycloak import KeycloakAdmin
+from keycloak import KeycloakOpenIDConnection
+from keycloak.exceptions import KeycloakGetError
+
+
+class UserGroupBase(models.Model):
+    """
+    Abstract base model for Keycloak user groups.
+    """
+    id = models.UUIDField(
+        primary_key=True,
+        help_text="The ID of the group, as coming from Keycloak.",
+    )
+    path = models.CharField(
+        max_length=255,
+        help_text="The full path of the group, as coming from Keycloak.",
+        db_index=True,
+    )
+
+    class Meta:
+        abstract = True
+
+
+class KeycloakService:
+    def __init__(self):
+        self._user_group_model = self._get_user_group_model()
+        self._keycloak_admin = self._get_keycloak_admin()
+
+    def sync_user_groups(self, raise_exceptions: bool = False):
+        print("Syncing user groups from Keycloak...")
+
+        try:
+            groups = self._keycloak_admin.get_groups(full_hierarchy=True)
+        except KeycloakGetError as e:
+            print(f"Failed to fetch groups from Keycloak: {str(e)}")
+            if raise_exceptions:
+                raise e
+
+            return
+
+        # Process existing and new groups
+        existing_groups = self._user_group_model.objects.all()
+        existing_groups_by_id = {str(group.id): group for group in existing_groups}
+
+        reported_group_ids = set()
+        for group in groups:
+            self._process_group_recursively(
+                group, existing_groups_by_id, reported_group_ids
+            )
+
+        # Identify deleted groups
+        deleted_groups = self._user_group_model.objects.exclude(
+            id__in=reported_group_ids
+        )
+        if deleted_groups.exists():
+            print(
+                f"Deleting groups no longer present in Keycloak: {list(deleted_groups.values_list('path', flat=True))}"
+            )
+            deleted_groups.delete()
+
+    def _get_keycloak_admin(self):
+        keycloak_connection = KeycloakOpenIDConnection(
+            server_url=settings.KEYCLOAK_SERVER_URL,
+            realm_name=settings.KEYCLOAK_REALM,
+            user_realm_name=settings.KEYCLOAK_REALM,
+            client_id=settings.KEYCLOAK_ADMIN_CLIENT_ID,
+            client_secret_key=settings.KEYCLOAK_ADMIN_CLIENT_SECRET,
+            verify=True,
+        )
+        return KeycloakAdmin(connection=keycloak_connection)
+
+    def _get_user_group_model(self):
+        """
+        Dynamically get the UserGroup model.
+
+        Attempts to use the model specified in settings.KEYCLOAK_USER_GROUP_MODEL.
+
+        Returns:
+            The UserGroup model class.
+
+        Raises:
+            LookupError: If the model cannot be found.
+        """
+        try:
+            model_string = getattr(settings, "KEYCLOAK_USER_GROUP_MODEL")
+        except AttributeError:
+            raise LookupError(
+                "Please set KEYCLOAK_USER_GROUP_MODEL in your Django settings "
+                "(e.g., 'myapp.models.UserGroup')."
+            )
+
+        return apps.get_model(model_string)
+
+    def _process_group_recursively(
+        self, group, existing_groups_by_id, reported_group_ids
+    ):
+        group_id = str(group["id"])
+        reported_group_ids.add(group_id)
+
+        if group_id in existing_groups_by_id:
+            existing_group = existing_groups_by_id[group_id]
+            if existing_group.path != group["path"]:
+                print(
+                    f"Updating group path from {existing_group.path} to {group['path']}..."
+                )
+                existing_group.path = group["path"]
+                existing_group.save()
+        else:
+            print(f"Creating new group with path {group['path']}...")
+            self._user_group_model.objects.create(id=group_id, path=group["path"])
+
+        if subgroups := group.get("subGroups"):
+            for subgroup in subgroups:
+                self._process_group_recursively(
+                    subgroup, existing_groups_by_id, reported_group_ids
+                )