Merge pull request #13 from bossan/feature/site-user-created-signal

Added signal to create user cert when assigned to site

README.md

@@ -7,3 +7,20 @@ Features:
 - Self-service portal to generate client certificates and download device profiles for iOS/macOS
 - Multi-site
 - OCSP endpoint to validate the issued certificates
+
+## Configuration
+
+### Settings
+```python
+
+INSTALLED_APPS = [
+    ...
+    'pki',
+    ...
+]
+
+# Sign the iOS/macOS device profiles using SMIME
+SIGN_PROFILES = True
+# Generate a new user certificate when a user is assigned to a site
+GENERATE_CERT_ON_CREATE = True
+```

demo/demo/settings.py

@@ -154,3 +154,4 @@
 DEFAULT_AUTO_FIELD = 'django.db.models.BigAutoField'
 
 SIGN_PROFILES = True
+GENERATE_CERT_ON_CREATE = True

src/pki/apps.py

@@ -6,4 +6,4 @@ class PkiConfig(AppConfig):
     name = 'pki'
 
     def ready(self):
-        from .signals import after_site_created  # Noqa F401
+        from .signals import after_site_created, after_site_user_created  # Noqa F401

src/pki/signals/__init__.py

@@ -1 +1,2 @@
 from .site_created import after_site_created
+from .site_user_created import after_site_user_created

src/pki/signals/site_created.py

@@ -8,7 +8,7 @@
 
 
 @receiver(models.signals.post_save, sender=Site)
-def after_site_created(_, instance: Site, created: bool, *args, **kwargs):
+def after_site_created(sender, instance: Site, created: bool, *args, **kwargs):  # noqa
     if not created:
         return
 

src/pki/signals/site_user_created.py

@@ -0,0 +1,18 @@
+from django.conf import settings
+from django.db import models
+from django.dispatch import receiver
+
+from pki.models import SiteUser, CertificateAuthority
+
+import pki.services.certificate
+
+
+@receiver(models.signals.post_save, sender=SiteUser)
+def after_site_user_created(sender, instance: SiteUser, created: bool, *args, **kwargs):  # noqa
+    if not created or not getattr(settings, 'GENERATE_CERT_ON_CREATE', False):
+        return
+
+    ca = CertificateAuthority.objects.filter(site_id=instance.site_id).first()
+
+    if ca:
+        pki.services.certificate.generate_cert_for_user(user=instance.user, ca=ca)