356 lines
12 KiB
Python
356 lines
12 KiB
Python
|
# -*- coding: utf-8 -*-
|
|||
|
|
"""
|
|||
|
|
员工画像服务 (Employee Profile Service)
|
|||
|
|
|
|||
|
|
统一对接多个数据源，构建员工画像：
|
|||
|
|
- 企微通讯录：员工基本信息
|
|||
|
|
- 联软终端安全：补丁数、违规项
|
|||
|
|
- 火绒终端安全：终端版本、病毒库日期
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
import os
|
|||
|
|
import json
|
|||
|
|
import logging
|
|||
|
|
from typing import Optional, Dict, List, Any
|
|||
|
|
from datetime import datetime
|
|||
|
|
from dataclasses import dataclass, asdict
|
|||
|
|
import asyncio
|
|||
|
|
|
|||
|
|
import redis.asyncio as redis
|
|||
|
|
|
|||
|
|
logger = logging.getLogger(__name__)
|
|||
|
|
|
|||
|
|
|
|||
|
|
@dataclass
|
|||
|
|
class EmployeeProfile:
|
|||
|
|
"""员工画像数据模型"""
|
|||
|
|
employee_id: str
|
|||
|
|
name: str
|
|||
|
|
department: str
|
|||
|
|
position: str
|
|||
|
|
mobile: str
|
|||
|
|
|
|||
|
|
# 联软数据
|
|||
|
|
unionsoft_patches_missing: int = 0
|
|||
|
|
unionsoft_last_scan: Optional[datetime] = None
|
|||
|
|
unionsoft_violations: List[str] = None
|
|||
|
|
|
|||
|
|
# 火绒数据
|
|||
|
|
huorong_version: str = ""
|
|||
|
|
huorong_virusdb_date: Optional[datetime] = None
|
|||
|
|
huorong_offline_days: int = 0
|
|||
|
|
|
|||
|
|
# 元数据
|
|||
|
|
last_updated: Optional[datetime] = None
|
|||
|
|
|
|||
|
|
def __post_init__(self):
|
|||
|
|
if self.unionsoft_violations is None:
|
|||
|
|
self.unionsoft_violations = []
|
|||
|
|
|
|||
|
|
|
|||
|
|
class EmployeeProfileService:
|
|||
|
|
"""
|
|||
|
|
员工画像服务
|
|||
|
|
|
|||
|
|
功能：
|
|||
|
|
1. 从企微/联软/火绒聚合员工画像
|
|||
|
|
2. Redis 缓存，避免频繁调用第三方 API
|
|||
|
|
3. 并行获取，提升响应速度
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
_instance = None
|
|||
|
|
|
|||
|
|
def __new__(cls, *args, **kwargs):
|
|||
|
|
if cls._instance is None:
|
|||
|
|
cls._instance = super().__new__(cls)
|
|||
|
|
cls._instance._initialized = False
|
|||
|
|
return cls._instance
|
|||
|
|
|
|||
|
|
def __init__(self):
|
|||
|
|
if self._initialized:
|
|||
|
|
return
|
|||
|
|
|
|||
|
|
self._initialized = True
|
|||
|
|
|
|||
|
|
# Redis 连接
|
|||
|
|
redis_url = os.environ.get(
|
|||
|
|
'REDIS_URL',
|
|||
|
|
'redis://localhost:6379/0'
|
|||
|
|
)
|
|||
|
|
self.redis = redis.from_url(redis_url, decode_responses=True)
|
|||
|
|
|
|||
|
|
# 缓存 TTL（秒）
|
|||
|
|
self.cache_ttl = int(os.environ.get('EMPLOYEE_PROFILE_TTL', '3600')) # 默认 1 小时
|
|||
|
|
|
|||
|
|
# 客户端初始化（延迟加载）
|
|||
|
|
self._lianruan_client = None
|
|||
|
|
self._huorong_client = None
|
|||
|
|
self._wecom_service = None
|
|||
|
|
|
|||
|
|
logger.info("[EmployeeProfile] 服务初始化完成")
|
|||
|
|
|
|||
|
|
@property
|
|||
|
|
def lianruan_client(self):
|
|||
|
|
"""延迟加载联软客户端"""
|
|||
|
|
if self._lianruan_client is None:
|
|||
|
|
from app.integrations.lianruan.client import LianruanClient
|
|||
|
|
from app.integrations.lianruan.config import LianruanConfig
|
|||
|
|
|
|||
|
|
config = LianruanConfig()
|
|||
|
|
self._lianruan_client = LianruanClient(
|
|||
|
|
base_url=config.base_url,
|
|||
|
|
api_account=config.api_account,
|
|||
|
|
api_password=config.api_password,
|
|||
|
|
validate_key=config.validate_key
|
|||
|
|
)
|
|||
|
|
return self._lianruan_client
|
|||
|
|
|
|||
|
|
@property
|
|||
|
|
def huorong_client(self):
|
|||
|
|
"""延迟加载火绒客户端"""
|
|||
|
|
if self._huorong_client is None:
|
|||
|
|
from app.integrations.huorong.client import HuorongClient
|
|||
|
|
from app.integrations.huorong.config import HuorongConfig
|
|||
|
|
|
|||
|
|
config = HuorongConfig()
|
|||
|
|
self._huorong_client = HuorongClient(
|
|||
|
|
access_key_id=config.access_key_id,
|
|||
|
|
access_key_secret=config.access_key_secret,
|
|||
|
|
base_url=config.base_url
|
|||
|
|
)
|
|||
|
|
return self._huorong_client
|
|||
|
|
|
|||
|
|
@property
|
|||
|
|
def wecom_service(self):
|
|||
|
|
"""延迟加载企微服务"""
|
|||
|
|
if self._wecom_service is None:
|
|||
|
|
from app.services.wecom_service import WecomService
|
|||
|
|
self._wecom_service = WecomService()
|
|||
|
|
return self._wecom_service
|
|||
|
|
|
|||
|
|
async def get_profile(self, employee_id: str) -> EmployeeProfile:
|
|||
|
|
"""
|
|||
|
|
获取员工画像（带缓存）
|
|||
|
|
|
|||
|
|
Args:
|
|||
|
|
employee_id: 员工 ID（企微 UserID）
|
|||
|
|
|
|||
|
|
Returns:
|
|||
|
|
员工画像对象
|
|||
|
|
"""
|
|||
|
|
cache_key = f"employee_profile:{employee_id}"
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
# 1. 尝试从缓存获取
|
|||
|
|
cached = await self.redis.get(cache_key)
|
|||
|
|
if cached:
|
|||
|
|
data = json.loads(cached)
|
|||
|
|
logger.debug(f"[EmployeeProfile] 缓存命中: {employee_id}")
|
|||
|
|
return EmployeeProfile(**data)
|
|||
|
|
|
|||
|
|
# 2. 从各数据源聚合
|
|||
|
|
profile = await self._aggregate_profile(employee_id)
|
|||
|
|
|
|||
|
|
# 3. 写入缓存
|
|||
|
|
profile_dict = asdict(profile)
|
|||
|
|
profile_dict['last_updated'] = datetime.now().isoformat()
|
|||
|
|
await self.redis.setex(
|
|||
|
|
cache_key,
|
|||
|
|
self.cache_ttl,
|
|||
|
|
json.dumps(profile_dict)
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
logger.debug(f"[EmployeeProfile] 画像已更新: {employee_id}")
|
|||
|
|
return profile
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f"[EmployeeProfile] 获取画像失败: {employee_id}, {e}")
|
|||
|
|
# 返回基础画像
|
|||
|
|
return EmployeeProfile(
|
|||
|
|
employee_id=employee_id,
|
|||
|
|
name='',
|
|||
|
|
department='',
|
|||
|
|
position='',
|
|||
|
|
mobile=''
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
async def _aggregate_profile(self, employee_id: str) -> EmployeeProfile:
|
|||
|
|
"""
|
|||
|
|
从多个数据源聚合员工画像
|
|||
|
|
"""
|
|||
|
|
# 并行获取各数据源
|
|||
|
|
wecom_task = self._get_wecom_profile(employee_id)
|
|||
|
|
unionsoft_task = self._get_unionsoft_status(employee_id)
|
|||
|
|
huorong_task = self._get_huorong_status(employee_id)
|
|||
|
|
|
|||
|
|
try:
|
|||
|
|
wecom, unionsoft, huorong = await asyncio.gather(
|
|||
|
|
wecom_task,
|
|||
|
|
unionsoft_task,
|
|||
|
|
huorong_task,
|
|||
|
|
return_exceptions=True
|
|||
|
|
)
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f"[EmployeeProfile] 并行获取失败: {e}")
|
|||
|
|
wecom, unionsoft, huorong = {}, {}, {}
|
|||
|
|
|
|||
|
|
return EmployeeProfile(
|
|||
|
|
employee_id=employee_id,
|
|||
|
|
name=wecom.get('name', ''),
|
|||
|
|
department=wecom.get('department', ''),
|
|||
|
|
position=wecom.get('position', ''),
|
|||
|
|
mobile=wecom.get('mobile', ''),
|
|||
|
|
unionsoft_patches_missing=unionsoft.get('patches_missing', 0),
|
|||
|
|
unionsoft_last_scan=unionsoft.get('last_scan'),
|
|||
|
|
unionsoft_violations=unionsoft.get('violations', []),
|
|||
|
|
huorong_version=huorong.get('version', ''),
|
|||
|
|
huorong_virusdb_date=huorong.get('virusdb_date'),
|
|||
|
|
huorong_offline_days=huorong.get('offline_days', 0)
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
async def _get_wecom_profile(self, employee_id: str) -> Dict:
|
|||
|
|
"""从企微获取员工基本信息"""
|
|||
|
|
try:
|
|||
|
|
# 简化实现，实际应调用企微 API
|
|||
|
|
# 这里返回空字典，实际使用时接入企微通讯录 API
|
|||
|
|
logger.debug(f"[EmployeeProfile] 企微画像查询: {employee_id}")
|
|||
|
|
return {
|
|||
|
|
'name': '',
|
|||
|
|
'department': '',
|
|||
|
|
'position': '',
|
|||
|
|
'mobile': ''
|
|||
|
|
}
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.warning(f"[EmployeeProfile] 企微 API 调用失败: {e}")
|
|||
|
|
return {}
|
|||
|
|
|
|||
|
|
async def _get_unionsoft_status(self, employee_id: str) -> Dict:
|
|||
|
|
"""从联软获取终端安全状态"""
|
|||
|
|
try:
|
|||
|
|
# 简化实现，实际应调用联软 API
|
|||
|
|
# 尝试查询终端信息
|
|||
|
|
client = self.lianruan_client
|
|||
|
|
|
|||
|
|
# 根据员工姓名/账号查询终端
|
|||
|
|
# 这里需要根据实际业务逻辑调整
|
|||
|
|
terminals = await client.query_dev_by_params(strusername=employee_id)
|
|||
|
|
|
|||
|
|
if not terminals:
|
|||
|
|
return {
|
|||
|
|
'patches_missing': 0,
|
|||
|
|
'last_scan': None,
|
|||
|
|
'violations': []
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 取第一个终端的信息
|
|||
|
|
terminal = terminals[0]
|
|||
|
|
|
|||
|
|
# 获取终端详情
|
|||
|
|
detail = await client.get_dev_all_info(strdevname=terminal.device_name)
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
'patches_missing': getattr(detail, 'patches_missing', 0) or 0,
|
|||
|
|
'last_scan': getattr(detail, 'last_scan_time', None),
|
|||
|
|
'violations': getattr(detail, 'violations', []) or []
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.warning(f"[EmployeeProfile] 联软 API 调用失败: {e}")
|
|||
|
|
return {
|
|||
|
|
'patches_missing': 0,
|
|||
|
|
'last_scan': None,
|
|||
|
|
'violations': []
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async def _get_huorong_status(self, employee_id: str) -> Dict:
|
|||
|
|
"""从火绒获取终端状态"""
|
|||
|
|
try:
|
|||
|
|
client = self.huorong_client
|
|||
|
|
|
|||
|
|
# 根据员工账号查询终端
|
|||
|
|
terminals = await client.list_terminals()
|
|||
|
|
|
|||
|
|
# 找到匹配的终端（通常按设备名或账号匹配）
|
|||
|
|
matched = None
|
|||
|
|
for t in terminals:
|
|||
|
|
if employee_id in str(t.device_name) or employee_id in str(t.account):
|
|||
|
|
matched = t
|
|||
|
|
break
|
|||
|
|
|
|||
|
|
if not matched:
|
|||
|
|
return {
|
|||
|
|
'version': '',
|
|||
|
|
'virusdb_date': None,
|
|||
|
|
'offline_days': 0
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 获取终端详情
|
|||
|
|
detail = await client.get_terminal_info2(matched.id)
|
|||
|
|
|
|||
|
|
# 计算离线天数
|
|||
|
|
offline_days = 0
|
|||
|
|
if hasattr(detail, 'last_online_time') and detail.last_online_time:
|
|||
|
|
try:
|
|||
|
|
last_online = datetime.fromisoformat(
|
|||
|
|
detail.last_online_time.replace('Z', '+00:00')
|
|||
|
|
)
|
|||
|
|
offline_days = (datetime.now() - last_online.replace(tzinfo=None)).days
|
|||
|
|
except:
|
|||
|
|
pass
|
|||
|
|
|
|||
|
|
return {
|
|||
|
|
'version': getattr(detail, 'agent_version', ''),
|
|||
|
|
'virusdb_date': getattr(detail, 'virus_db_date', None),
|
|||
|
|
'offline_days': offline_days
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.warning(f"[EmployeeProfile] 火绒 API 调用失败: {e}")
|
|||
|
|
return {
|
|||
|
|
'version': '',
|
|||
|
|
'virusdb_date': None,
|
|||
|
|
'offline_days': 0
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
async def clear_expired_cache(self) -> int:
|
|||
|
|
"""清理过期缓存"""
|
|||
|
|
try:
|
|||
|
|
cursor = 0
|
|||
|
|
deleted = 0
|
|||
|
|
while True:
|
|||
|
|
cursor, keys = await self.redis.scan(
|
|||
|
|
cursor=cursor,
|
|||
|
|
match='employee_profile:*',
|
|||
|
|
count=100
|
|||
|
|
)
|
|||
|
|
if keys:
|
|||
|
|
deleted += await self.redis.delete(*keys)
|
|||
|
|
if cursor == 0:
|
|||
|
|
break
|
|||
|
|
logger.info(f"[EmployeeProfile] 清理过期缓存: {deleted} 条")
|
|||
|
|
return deleted
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f"[EmployeeProfile] 清理缓存失败: {e}")
|
|||
|
|
return 0
|
|||
|
|
|
|||
|
|
async def invalidate_cache(self, employee_id: str) -> None:
|
|||
|
|
"""使指定员工的缓存失效"""
|
|||
|
|
try:
|
|||
|
|
cache_key = f"employee_profile:{employee_id}"
|
|||
|
|
await self.redis.delete(cache_key)
|
|||
|
|
logger.debug(f"[EmployeeProfile] 缓存已失效: {employee_id}")
|
|||
|
|
except Exception as e:
|
|||
|
|
logger.error(f"[EmployeeProfile] 缓存失效失败: {employee_id}, {e}")
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 全局单例
|
|||
|
|
_employee_profile_service: Optional[EmployeeProfileService] = None
|
|||
|
|
|
|||
|
|
|
|||
|
|
def get_employee_profile_service() -> EmployeeProfileService:
|
|||
|
|
"""获取员工画像服务单例"""
|
|||
|
|
global _employee_profile_service
|
|||
|
|
if _employee_profile_service is None:
|
|||
|
|
_employee_profile_service = EmployeeProfileService()
|
|||
|
|
return _employee_profile_service
|