eising/sshecret
1
0
Fork 0
Code Issues 28 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Fix audit as async, function name

Browse Source
This commit is contained in:
Allan Eising
2025-05-11 11:22:20 +02:00
parent d3d99775d9
commit a07fba9560
2 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
packages/sshecret-sshd/src/sshecret_sshd/ssh_server.py
View File

@ -32,7 +32,7 @@ class CommandError(Exception):
"""Error class for errors during command processing."""
def audit_process(
async def audit_process(
backend: SshecretBackend,
process: asyncssh.SSHServerProcess[str],
operation: Operation,
@ -54,12 +54,12 @@ def audit_process(
data["command"] = cmd
data["args"] = " ".join(cmd_args)
backend.audit(SubSystem.SSHD).write(
await backend.audit(SubSystem.SSHD).write_async(
operation, message, remote_ip, client, secret=None, secret_name=secret, **data
)
def audit_event(
async def audit_event(
backend: SshecretBackend,
message: str,
operation: Operation,
@ -70,7 +70,7 @@ def audit_event(
"""Add an audit event."""
if not origin:
origin = "UNKNOWN"
backend.audit(SubSystem.SSHD).write(
await backend.audit(SubSystem.SSHD).write_async(
operation, message, origin, client, secret=None, secret_name=secret
)
@ -187,7 +187,7 @@ async def register_client(
key = asyncssh.import_public_key(public_key)
if key.algorithm.decode() != "ssh-rsa":
raise CommandError(constants.ERROR_INVALID_KEY_TYPE)
audit_process(backend, process, Operation.CREATE, "Registering new client")
await audit_process(backend, process, Operation.CREATE, "Registering new client")
LOG.debug("Registering client %s with public key %s", username, public_key)
await backend.create_client(username, public_key)
@ -205,7 +205,7 @@ async def get_secret(
if secret_name not in client.secrets:
raise CommandError(constants.ERROR_NO_SECRET_FOUND)
audit_event(
await audit_event(
backend,
"Client requested secret",
operation=Operation.READ,
@ -247,7 +247,7 @@ async def dispatch_cmd_register(process: asyncssh.SSHServerProcess[str]) -> None
allowed_networks = get_info_allowed_registration(process)
if not allowed_networks:
process.stdout.write("Unauthorized.\n")
audit_process(
await audit_process(
backend,
process,
Operation.DENY,
@ -266,7 +266,7 @@ async def dispatch_cmd_register(process: asyncssh.SSHServerProcess[str]) -> None
if client_address in network:
break
else:
audit_process(
await audit_process(
backend,
process,
Operation.DENY,
@ -390,7 +390,7 @@ class AsshyncServer(asyncssh.SSHServer):
self._conn.set_extra_info(client=client)
self._conn.set_authorized_keys(key)
else:
audit_event(
await audit_event(
self.backend,
"Client denied due to policy",
Operation.DENY,
@ -492,7 +492,7 @@ async def run_ssh_server(
return server
async def start_server(settings: ServerSettings | None = None) -> None:
async def start_sshecret_sshd(settings: ServerSettings | None = None) -> asyncssh.SSHAcceptor:
"""Start the server."""
server_key = get_server_key()
@ -500,7 +500,7 @@ async def start_server(settings: ServerSettings | None = None) -> None:
settings = ServerSettings() # pyright: ignore[reportCallIssue]
backend = SshecretBackend(str(settings.backend_url), settings.backend_token)
await run_ssh_server(
return await run_ssh_server(
backend=backend,
listen_address=settings.listen_address,
port=settings.port,