Ubuntu
83 lines
2.7 KiB
Python
83 lines
2.7 KiB
Python
"""ZeroTier membership model — observed controller-side member state."""
|
|
|
|
from gatehouse_app.extensions import db
|
|
from gatehouse_app.models.base import BaseModel
|
|
|
|
|
|
class ZeroTierMembership(BaseModel):
|
|
"""Observed state of a node in a ZeroTier network from the controller API.
|
|
|
|
This is maintained as a cache of controller-side state, updated by the
|
|
reconciliation loop and by direct API calls. The raw_controller_payload
|
|
column stores the full API response for debugging and audit.
|
|
|
|
Keyed by zerotier_network_id + node_id (unique constraint).
|
|
|
|
Attributes:
|
|
organization_id: FK to the organization
|
|
network_access_request_id: FK to the portal's access request record (nullable)
|
|
zerotier_network_id: The 16-char hex ZeroTier network ID
|
|
node_id: The 10-char hex ZeroTier node ID
|
|
member_seen: Whether the controller has ever seen this member
|
|
authorized: Current authorization state from ZeroTier
|
|
join_seen_at: When the member was first seen joining
|
|
last_synced_at: When we last polled ZeroTier for this member
|
|
raw_controller_payload: Full API response for debugging
|
|
"""
|
|
|
|
__tablename__ = "zerotier_memberships"
|
|
|
|
organization_id = db.Column(
|
|
db.String(36),
|
|
db.ForeignKey("organizations.id"),
|
|
nullable=False,
|
|
index=True,
|
|
)
|
|
network_access_request_id = db.Column(
|
|
db.String(36),
|
|
db.ForeignKey("network_access_requests.id"),
|
|
nullable=True,
|
|
index=True,
|
|
)
|
|
zerotier_network_id = db.Column(
|
|
db.String(16),
|
|
nullable=False,
|
|
index=True,
|
|
)
|
|
node_id = db.Column(
|
|
db.String(10),
|
|
nullable=False,
|
|
index=True,
|
|
)
|
|
member_seen = db.Column(db.Boolean, default=False, nullable=False)
|
|
authorized = db.Column(db.Boolean, default=False, nullable=False)
|
|
join_seen_at = db.Column(db.DateTime, nullable=True)
|
|
last_synced_at = db.Column(db.DateTime, nullable=True)
|
|
raw_controller_payload = db.Column(db.JSON, nullable=True)
|
|
|
|
# Relationships
|
|
organization = db.relationship("Organization", backref="zerotier_memberships")
|
|
access_request = db.relationship(
|
|
"NetworkAccessRequest",
|
|
back_populates="zerotier_membership",
|
|
)
|
|
|
|
__table_args__ = (
|
|
db.UniqueConstraint(
|
|
"zerotier_network_id",
|
|
"node_id",
|
|
name="uix_zt_network_node",
|
|
),
|
|
)
|
|
|
|
def __repr__(self):
|
|
return (
|
|
f"<ZeroTierMembership network={self.zerotier_network_id} "
|
|
f"node={self.node_id} authorized={self.authorized}>"
|
|
)
|
|
|
|
def to_dict(self, exclude=None):
|
|
exclude = exclude or []
|
|
data = super().to_dict(exclude=exclude)
|
|
return data
|