235 lines
8.8 KiB
Python
235 lines
8.8 KiB
Python
|
import random
|
||
|
|
import string
|
||
|
|
import time
|
||
|
|
from math import floor, log10
|
||
|
|
|
||
|
|
import orjson
|
||
|
|
from django.conf import settings
|
||
|
|
from siphashc import siphash
|
||
|
|
|
||
|
|
from core import r
|
||
|
|
from core.db.processing import annotate_results
|
||
|
|
from core.util import logs
|
||
|
|
|
||
|
|
|
||
|
|
class StorageBackend(object):
|
||
|
|
def __init__(self, name):
|
||
|
|
self.log = logs.get_logger(name)
|
||
|
|
self.log.info(f"Initialising storage backend {name}")
|
||
|
|
|
||
|
|
self.initialise_caching()
|
||
|
|
self.initialise()
|
||
|
|
|
||
|
|
def initialise(self, **kwargs):
|
||
|
|
raise NotImplementedError
|
||
|
|
|
||
|
|
def initialise_caching(self):
|
||
|
|
hash_key = r.get("cache_hash_key")
|
||
|
|
if not hash_key:
|
||
|
|
letters = string.ascii_lowercase
|
||
|
|
hash_key = "".join(random.choice(letters) for i in range(16))
|
||
|
|
self.log.debug(f"Created new hash key: {hash_key}")
|
||
|
|
r.set("cache_hash_key", hash_key)
|
||
|
|
else:
|
||
|
|
hash_key = hash_key.decode("ascii")
|
||
|
|
self.log.debug(f"Decoded hash key: {hash_key}")
|
||
|
|
self.hash_key = hash_key
|
||
|
|
|
||
|
|
def construct_query(self, **kwargs):
|
||
|
|
raise NotImplementedError
|
||
|
|
|
||
|
|
def run_query(self, **kwargs):
|
||
|
|
raise NotImplementedError
|
||
|
|
|
||
|
|
def parse_size(self, query_params, sizes):
|
||
|
|
if "size" in query_params:
|
||
|
|
size = query_params["size"]
|
||
|
|
if size not in sizes:
|
||
|
|
message = "Size is not permitted"
|
||
|
|
message_class = "danger"
|
||
|
|
return {"message": message, "class": message_class}
|
||
|
|
size = int(size)
|
||
|
|
else:
|
||
|
|
size = 15
|
||
|
|
|
||
|
|
return size
|
||
|
|
|
||
|
|
def parse_index(self, user, query_params):
|
||
|
|
if "index" in query_params:
|
||
|
|
index = query_params["index"]
|
||
|
|
if index == "main":
|
||
|
|
index = settings.INDEX_MAIN
|
||
|
|
else:
|
||
|
|
if not user.has_perm(f"core.index_{index}"):
|
||
|
|
message = "Not permitted to search by this index"
|
||
|
|
message_class = "danger"
|
||
|
|
return {
|
||
|
|
"message": message,
|
||
|
|
"class": message_class,
|
||
|
|
}
|
||
|
|
if index == "meta":
|
||
|
|
index = settings.INDEX_META
|
||
|
|
elif index == "internal":
|
||
|
|
index = settings.INDEX_INT
|
||
|
|
else:
|
||
|
|
message = "Index is not valid."
|
||
|
|
message_class = "danger"
|
||
|
|
return {
|
||
|
|
"message": message,
|
||
|
|
"class": message_class,
|
||
|
|
}
|
||
|
|
else:
|
||
|
|
index = settings.INDEX_MAIN
|
||
|
|
return index
|
||
|
|
|
||
|
|
def parse_query(self, query_params, tags, size, index, custom_query, add_bool):
|
||
|
|
if "query" in query_params:
|
||
|
|
query = query_params["query"]
|
||
|
|
search_query = self.construct_query(query, size, index)
|
||
|
|
query_created = True
|
||
|
|
else:
|
||
|
|
if custom_query:
|
||
|
|
search_query = custom_query
|
||
|
|
|
||
|
|
if tags:
|
||
|
|
# Get a blank search query
|
||
|
|
if not query_created:
|
||
|
|
search_query = self.construct_query(None, size, index, blank=True)
|
||
|
|
query_created = True
|
||
|
|
for tagname, tagvalue in tags.items():
|
||
|
|
add_bool.append({tagname: tagvalue})
|
||
|
|
|
||
|
|
required_any = ["query", "tags"]
|
||
|
|
if not any([field in query_params.keys() for field in required_any]):
|
||
|
|
if not custom_query:
|
||
|
|
message = "Empty query!"
|
||
|
|
message_class = "warning"
|
||
|
|
return {"message": message, "class": message_class}
|
||
|
|
|
||
|
|
return search_query
|
||
|
|
|
||
|
|
def parse_source(self, user, query_params):
|
||
|
|
if "source" in query_params:
|
||
|
|
source = query_params["source"]
|
||
|
|
|
||
|
|
if source in settings.SOURCES_RESTRICTED:
|
||
|
|
if not user.has_perm("core.restricted_sources"):
|
||
|
|
message = "Access denied"
|
||
|
|
message_class = "danger"
|
||
|
|
return {"message": message, "class": message_class}
|
||
|
|
elif source not in settings.MAIN_SOURCES:
|
||
|
|
message = "Invalid source"
|
||
|
|
message_class = "danger"
|
||
|
|
return {"message": message, "class": message_class}
|
||
|
|
|
||
|
|
if source == "all":
|
||
|
|
source = None # the next block will populate it
|
||
|
|
|
||
|
|
if source:
|
||
|
|
sources = [source]
|
||
|
|
else:
|
||
|
|
sources = list(settings.MAIN_SOURCES)
|
||
|
|
if user.has_perm("core.restricted_sources"):
|
||
|
|
for source_iter in settings.SOURCES_RESTRICTED:
|
||
|
|
sources.append(source_iter)
|
||
|
|
|
||
|
|
return sources
|
||
|
|
|
||
|
|
def filter_blacklisted(self, user, response):
|
||
|
|
"""
|
||
|
|
Low level filter to take the raw OpenSearch response and remove
|
||
|
|
objects from it we want to keep secret.
|
||
|
|
Does not return, the object is mutated in place.
|
||
|
|
"""
|
||
|
|
response["redacted"] = 0
|
||
|
|
response["exemption"] = None
|
||
|
|
if user.is_superuser:
|
||
|
|
response["exemption"] = True
|
||
|
|
# is_anonymous = isinstance(user, AnonymousUser)
|
||
|
|
# For every hit from ES
|
||
|
|
for index, item in enumerate(list(response["hits"]["hits"])):
|
||
|
|
# For every blacklisted type
|
||
|
|
for blacklisted_type in settings.OPENSEARCH_BLACKLISTED.keys():
|
||
|
|
# Check this field we are matching exists
|
||
|
|
if "_source" in item.keys():
|
||
|
|
data_index = "_source"
|
||
|
|
elif "fields" in item.keys():
|
||
|
|
data_index = "fields"
|
||
|
|
else:
|
||
|
|
return False
|
||
|
|
if blacklisted_type in item[data_index].keys():
|
||
|
|
content = item[data_index][blacklisted_type]
|
||
|
|
# For every item in the blacklisted array for the type
|
||
|
|
for blacklisted_item in settings.OPENSEARCH_BLACKLISTED[
|
||
|
|
blacklisted_type
|
||
|
|
]:
|
||
|
|
if blacklisted_item == str(content):
|
||
|
|
# Remove the item
|
||
|
|
if item in response["hits"]["hits"]:
|
||
|
|
# Let the UI know something was redacted
|
||
|
|
if (
|
||
|
|
"exemption"
|
||
|
|
not in response["hits"]["hits"][index][data_index]
|
||
|
|
):
|
||
|
|
response["redacted"] += 1
|
||
|
|
# Anonymous
|
||
|
|
if user.is_anonymous:
|
||
|
|
# Just set it to none so the index is not off
|
||
|
|
response["hits"]["hits"][index] = None
|
||
|
|
else:
|
||
|
|
if not user.has_perm("core.bypass_blacklist"):
|
||
|
|
response["hits"]["hits"][index] = None
|
||
|
|
else:
|
||
|
|
response["hits"]["hits"][index][data_index][
|
||
|
|
"exemption"
|
||
|
|
] = True
|
||
|
|
|
||
|
|
# Actually get rid of all the things we set to None
|
||
|
|
response["hits"]["hits"] = [hit for hit in response["hits"]["hits"] if hit]
|
||
|
|
|
||
|
|
def query(self, user, search_query):
|
||
|
|
# For time tracking
|
||
|
|
start = time.process_time()
|
||
|
|
if settings.CACHE:
|
||
|
|
# Sort the keys so the hash is the same
|
||
|
|
query_normalised = orjson.dumps(search_query, option=orjson.OPT_SORT_KEYS)
|
||
|
|
hash = siphash(self.hash_key, query_normalised)
|
||
|
|
cache_hit = r.get(f"query_cache.{user.id}.{hash}")
|
||
|
|
if cache_hit:
|
||
|
|
response = orjson.loads(cache_hit)
|
||
|
|
response["cache"] = True
|
||
|
|
return response
|
||
|
|
response = self.run_query(user, search_query)
|
||
|
|
if "error" in response and len(response.keys()) == 1:
|
||
|
|
return response
|
||
|
|
# response = response.to_dict()
|
||
|
|
# print("RESP", response)
|
||
|
|
if "took" in response:
|
||
|
|
if response["took"] is None:
|
||
|
|
return None
|
||
|
|
self.filter_blacklisted(user, response)
|
||
|
|
|
||
|
|
# Write cache
|
||
|
|
if settings.CACHE:
|
||
|
|
to_write_cache = orjson.dumps(response)
|
||
|
|
r.set(f"query_cache.{user.id}.{hash}", to_write_cache)
|
||
|
|
r.expire(f"query_cache.{user.id}.{hash}", settings.CACHE_TIMEOUT)
|
||
|
|
|
||
|
|
# Parse the response
|
||
|
|
response_parsed = self.parse(response)
|
||
|
|
|
||
|
|
time_took = (time.process_time() - start) * 1000
|
||
|
|
# Round to 3 significant figures
|
||
|
|
time_took_rounded = round(time_took, 3 - int(floor(log10(abs(time_took)))) - 1)
|
||
|
|
return {"object_list": response_parsed, "took": time_took_rounded}
|
||
|
|
|
||
|
|
def query_results(self, **kwargs):
|
||
|
|
raise NotImplementedError
|
||
|
|
|
||
|
|
def process_results(self, **kwargs):
|
||
|
|
if kwargs.get("annotate"):
|
||
|
|
annotate_results(kwargs["results"])
|
||
|
|
|
||
|
|
def parse(self, response):
|
||
|
|
raise NotImplementedError
|