jump-admin/server/jumpserver.py

# -*- coding: UTF-8 -*-

import sys
import getopt
import os
import time
from threading import Timer
import subprocess
import sqlite3
import json
import urllib.parse as urlparse
from urllib.parse import urlencode
import hashlib
import requests

from flask import request, Flask, redirect, session, render_template
from flask_cors import CORS

app = Flask(__name__,
            static_folder="/home/daniel/vue-admin/dist/static",
            template_folder="/home/daniel/vue-admin/dist")
app.config['SECRET_KEY'] = os.urandom(24)
CORS(app)

# http bind
gHost = ""
gPort = 0
gDebug = 0

# 默认ssh管理账号
gDefaultSSHAdmin = "ec2-user"

# 默认初始密码
gDefaultInitPassword = "cynking"

# sql语句
gUsersTableSql = "create table if not exists users(id integer primary key autoincrement, name varchar(128) not null UNIQUE, sudo integer not null default 0, isdelete integer not null default 0, desc varchar(128), date timestamp not null default (datetime('now','localtime')))"
gHostsTableSql = "create table if not exists hosts(id integer primary key autoincrement, name varchar(128) not null UNIQUE, ip varchar(32) not null, port integer not null default 22, isdelete integer not null default 0, desc varchar(128), date timestamp not null default (datetime('now','localtime')))"
gHostUserSql = "create table if not exists hostuser(id integer primary key autoincrement, hostname varchar(128) not null, username varchar(128) not null, sudo integer not null default 0, isdelete integer not null default 0, date timestamp not null default (datetime('now','localtime')))"

# 添加跳板机用户脚本
gManagerUserShellFile = "manager_user.sh"
# 添加远程用户脚本
# gAddLocalUserShellFile = "add_remote_user.sh"

# sso应用信息
SSO_APPID = 18
SSO_APPTOKEN = "b813d5b7e4449177cd844bfb00ba8108"
SSO_URL = URL = "http://sso.cynking.cn/"
SSO_AUTH_URL = "http://sso.cynking.cn/?do=login.s_login&appid=%d" % SSO_APPID

# 服务主页地址
gUrl = "http://192.168.1.44:8080/"
# sso管理
gSsoManager = {}
# sso定时器执行周期
SSO_TIMER_PERIOD = 5*60
# sso过期时间
SSO_EXPIRE_TIMEOUT = 24*60*60


# 解析命令行
def parse_cmd():
    ''' 解析命令行参数 '''
    global gHost, gPort, gDebug
    try:
        opts, _ = getopt.getopt(sys.argv[1:], "Hh:p:l:d:", [
                                "ip=", "port=", "debug="])
    except getopt.GetoptError:
        print('python3 %s -h <host> -p <port> -d <debug>' % (sys.argv[0]))
        sys.exit(0)
    for opt, arg in opts:
        if opt == '-H':
            print('python3 %s -h <host> -p <port> -d <debug>' % (sys.argv[0]))
            sys.exit(0)
        elif opt in ("-h", "--host"):
            gHost = arg
        elif opt in ("-p", "--port"):
            gPort = int(arg)
        elif opt in ("-l", "--debug"):
            gDebug = int(arg)

    if len(gHost) == 0 or gPort == 0:
        print('python3 %s -h <host> -p <port> -d <debug>' % (sys.argv[0]))
        sys.exit(0)

    # 主页url
    global gUrl
    gUrl = "http://%s:%d/" % (gHost, gPort)


# 只有执行结果
def exec_command(cmd):
    return subprocess.call(cmd, shell=True)


# 执行结果 和 输出
def exec_command_output(cmd):
    return subprocess.getstatusoutput(cmd)


# 同步目标机sh文件
def sync_remote_control_file(host, port):
    status, output = exec_command_output(
        "scp -P %d manager_user.sh %s@%s:.manager_user.sh" % (port, gDefaultSSHAdmin, host))
    if status != 0:
        print("sync_remote_control_file error %s" % output)
        return -1
    return 0


# 重定向
def redirect_sso():
    return '<script language="JavaScript">self.location="' + SSO_AUTH_URL + '";</script>'


# 计算md5
def make_md5(data):
    md = hashlib.md5()
    md.update(data.encode('utf-8'))
    return md.hexdigest()


# 获取用户信息
def getUserInfo(params):
    params["do"] = "user.getInfo"
    params["appid"] = SSO_APPID
    params["_time"] = int(time.time())
    sort_params = sorted(params.items())

    params = {}
    for value in sort_params:
        params[value[0]] = value[1]

    params["sig"] = make_md5(urlencode(params) + SSO_APPTOKEN)  # 签名
    url = SSO_URL + "cmsapi.php"

    resp = requests.get(url, params)
    return json.loads(resp.text)


def checkCookie(request):
    # 获取http参数
    if request.method == "GET":
        sso_uid = 0
        _sso_uid = request.args.get('sso_uid')
        if _sso_uid != None:
            sso_uid = int(_sso_uid)
        sso_token = request.args.get('sso_token')
    elif request.method == "POST":
        sso_uid = 0
        _sso_uid = request.form.get("sso_uid")
        if _sso_uid != None:
            sso_uid = int(_sso_uid)
        sso_token = request.form.get("sso_token")

    # 获取sso信息有就保存
    if sso_uid != None and sso_token != None and sso_uid != 0 and len(sso_token) > 0:
        session["sso_uid"] = sso_uid
        session["sso_token"] = sso_token

    # 从session中获取sso信息
    ck_uid = session.get("sso_uid")
    ck_token = session.get("sso_token")
    if ck_uid == None or ck_token == None or ck_uid == 0 or len(ck_token) == 0:
        return False

    # sso信息未过期则不需要验证
    sso_info = gSsoManager.get(ck_uid)
    if sso_info != None:
        if sso_info["sso_token"] == ck_token:
            return True
    return False

    # # 丢弃
    # # 每次请求都验证用户信息太慢了
    # params = {"sso_uid": ck_uid, "sso_token": ck_token}
    # rets = getUserInfo(params)

    # if rets == None:
    #     return False
    # if rets["ret"] == -200:
    #     print(u"不信任的主机，请添加白名单")
    #     return False
    # if rets["ret"] != 1:
    #     return False
    # rets_data = rets.get("data")
    # if rets_data == None:
    #     return False
    # rets_data_uid = rets_data.get("uid")
    # if rets_data_uid == None:
    #     return False
    # return True


# sso回调接口
@app.route('/sso', methods=['GET', 'POST'])
def sso():
    return do_sso(request)


def do_sso(request):
    if request.method == "GET":
        sso_uid = int(request.args.get('sso_uid'))
        sso_token = request.args.get('sso_token')
    elif request.method == "POST":
        sso_uid = int(request.form.get("sso_uid"))
        sso_token = request.form.get("sso_token")

    # 记录sso信息
    gSsoManager[sso_uid] = {
        "sso_uid": sso_uid, "sso_token": sso_token, "update_time": int(time.time())}

    params = urlparse.urlparse(request.url).query
    return redirect(gUrl + "?" + params)


# 登录
@app.route('/login', methods=['GET', 'POST'])
def login():
    if not checkCookie(request):
        return redirect_sso()
    return do_login(request)


# 主页
@app.route('/', methods=['GET', 'POST'])
def index():
    if not checkCookie(request):
        return redirect_sso()
    return render_template("index.html")


# 控制
@app.route('/jump/hosts', methods=['GET', 'POST'])
def hostlist():
    if not checkCookie(request):
        return redirect_sso()
    return do_hostlist(request)


@app.route('/jump/users', methods=['GET', 'POST'])
def userlist():
    if not checkCookie(request):
        return redirect_sso()
    return do_userlist(request)


@app.route('/jump/user/add', methods=['GET', 'POST'])
def add_user():
    if not checkCookie(request):
        return redirect_sso()
    return do_add_user(request)


@app.route('/jump/user/del', methods=['GET', 'POST'])
def del_user():
    if not checkCookie(request):
        return redirect_sso()
    return do_del_user(request)


@app.route('/jump/user/sudo', methods=['GET', 'POST'])
def sudo_user():
    if not checkCookie(request):
        return redirect_sso()
    return do_sudo_user(request)


@app.route('/jump/user/unsudo', methods=['GET', 'POST'])
def unsudo_user():
    if not checkCookie(request):
        return redirect_sso()
    return do_unsudo_user(request)


@app.route('/jump/user/modify', methods=['GET', 'POST'])
def modify_user():
    if not checkCookie(request):
        return redirect_sso()
    return do_modify_user(request)


@app.route('/jump/user/hosts', methods=['GET', 'POST'])
def userhostlist():
    if not checkCookie(request):
        return redirect_sso()
    return do_userhostlist(request)


@app.route('/jump/host/add', methods=['GET', 'POST'])
def add_host():
    if not checkCookie(request):
        return redirect_sso()
    return do_add_host(request)


@app.route('/jump/host/del', methods=['GET', 'POST'])
def del_host():
    if not checkCookie(request):
        return redirect_sso()
    return do_del_host(request)


@app.route('/jump/host/adduser', methods=['GET', 'POST'])
def host_adduser():
    if not checkCookie(request):
        return redirect_sso()
    return do_host_adduser(request)


@app.route('/jump/host/deluser', methods=['GET', 'POST'])
def host_deluser():
    if not checkCookie(request):
        return redirect_sso()
    return do_host_deluser(request)


@app.route('/jump/host/sudouser', methods=['GET', 'POST'])
def host_sudouser():
    if not checkCookie(request):
        return redirect_sso()
    return do_host_sudouser(request)


@app.route('/jump/host/unsudouser', methods=['GET', 'POST'])
def host_unsudouser():
    if not checkCookie(request):
        return redirect_sso()
    return do_host_unsudouser(request)


@app.route('/jump/host/modifyuser', methods=['GET', 'POST'])
def host_modifyuser():
    if not checkCookie(request):
        return redirect_sso()
    return do_host_modifyuser(request)


@app.route('/jump/host/users', methods=['GET', 'POST'])
def hostuserlist():
    if not checkCookie(request):
        return redirect_sso()
    return do_hostuserlist(request)


@app.route('/jump/hostuser', methods=['GET', 'POST'])
def hostuser():
    if not checkCookie(request):
        return redirect_sso()
    return do_hostuserall(request)


def do_login(request):
    if request.method == "GET":
        username = request.args.get('username')
        password = request.args.get('password')
    elif request.method == "POST":
        username = request.form.get("username") or "admin"
        password = request.form.get("password") or "123456"

    print("login username:%s password:%s" % (username, password))
    resp = {}
    resp["msg"] = "ok"
    resp["code"] = 200
    resp["user"] = username
    resp["sessionkey"] = "cookie-666"
    return json.dumps(resp)


# get主机列表
def do_hostlist(request):
    conn, cur = get_db()
    cur.execute("select id,name,ip,port,desc,date from hosts where isdelete=0;")
    hosts = cur.fetchall()
    cur.close()
    conn.close()

    resp = []
    for host in hosts:
        res = {}
        res["id"] = host[0]
        res["name"] = host[1]
        res["ip"] = host[2]
        res["port"] = host[3]
        res["desc"] = host[4]
        res["ctime"] = host[5]
        resp.append(res)
    return json.dumps(resp)


# 获取用户列表
def do_userlist(request):
    conn, cur = get_db()
    cur.execute("select id,name,sudo,desc,date from users where isdelete=0;")
    users = cur.fetchall()
    cur.close()
    conn.close()

    resp = []
    for user in users:
        res = {}
        res["id"] = user[0]
        res["name"] = user[1]
        res["sudo"] = user[2]
        res["desc"] = user[3]
        res["ctime"] = user[4]
        resp.append(res)
    return json.dumps(resp)

# 添加用户
def do_add_user(request):
    if request.method == "GET":
        name = request.args.get('name')
        desc = request.args.get('desc')
    elif request.method == "POST":
        name = request.form["name"]
        desc = request.form["desc"]

    conn, cur = get_db()
    cur.execute("select count(1) from users where name='%s'" % name)
    ret = cur.fetchone()
    if (len(ret) > 0 and ret[0]) >= 1:
        return "user %s exists" % name

    status, output = exec_command_output("sudo sh %s add %s \"%s\"" % (
        gManagerUserShellFile, name, gDefaultInitPassword))
    if status != 0:
        print("output=%s" % output)
        return "error %s" % output

    # 新增用户 sql
    cur.execute("insert into users(name,desc) values('%s',\"%s\")" %
                (name, desc))
    conn.commit()
    cur.close()
    conn.close()
    return "ok"


# 删除用户
def do_del_user(request):
    if request.method == "GET":
        username = request.args.get('name')
    elif request.method == "POST":
        username = request.form["name"]
    else:
        return "invalid request for del user"

    status, output = exec_command_output(
        "sudo sh %s del %s" % (gManagerUserShellFile, username))
    if status != 0:
        print("output=%s" % output)
        return "error %s" % output

    conn, cur = get_db()
    cur.execute("delete from users where name='%s'" % username)
    cur.execute("delete from hostuser where username='%s'" % username)
    conn.commit()
    cur.close()
    conn.close()
    return "del user %s ok" % username


# 修改用户
def do_modify_user(request):
    if request.method == "GET":
        username = request.args.get('username')
        sudo = int(request.args.get('sudo'))
        desc = request.args.get('desc')
    elif request.method == "POST":
        username = request.form["username"]
        sudo = int(request.form["sudo"])
        desc = request.form["desc"]
    else:
        return "invalid request for user"

    # check param
    if sudo != 0 and sudo != 1:
        return "invalid request sudo:%d param" % sudo

    # 需求数据库
    conn, cur = get_db()

    # 检查
    cur.execute("select sudo,desc from users where name='%s'" % username)
    users = cur.fetchall()
    if len(users) == 0:
        print("user(%s) not exitst" % username)
        return "user(%s) not exitst" % username

    user = users[0]
    user_sudo = user[0]
    user_desc = user[1]
    change = False  # 是否需要修改
    opParam = "sudo"  # 操作类型 sudo / unsudo
    if sudo == 0:
        opParam = "unsudo"

    if sudo != user_sudo:
        change = True

        # 处理sudo权限
        status, output = exec_command_output(
            "sudo sh manager_user.sh %s %s" % (opParam, username))
        if status != 0:
            print("%s user user(%s) failed! => output=%s" %
                  (opParam, username, output))
            return "error: %s user user(%s) failed! => output=%s" % (opParam, username, output)

    if desc != user_desc:
        change = True

    # 记录在数据库中
    if change:
        print("update users set sudo=%d,desc=\"%s\" where name='%s'" %
              (sudo, desc, username))
        cur.execute("update users set sudo=%d,desc=\"%s\" where name='%s'" % (
            sudo, desc, username))
        conn.commit()

    # 清理数据库
    cur.close()
    conn.close()
    print("modify user:%s successful [output: %s]" % (username, output))
    return "modify user:%s successful [output: %s]" % (username, output)


# 添加主机
def do_add_host(request):
    if request.method == "GET":
        name = request.args.get('name')
        ip = request.args.get('host')
        port = int(request.args.get('port'))
        desc = request.args.get('desc')
    elif request.method == "POST":
        name = request.form["name"]
        ip = request.form["host"]
        port = int(request.form["port"])
        desc = request.form["desc"]

    conn, cur = get_db()
    cur.execute(
        "select count(1) from hosts where name='%s' or ip='%s'" % (name, ip))
    ret = cur.fetchone()
    if (len(ret) > 0 and ret[0]) >= 1:
        return "alias name(%s) or ip(%s) is exists" % (name, ip)

    # 新增用户 sql
    cur.execute("insert into hosts(name,ip,port,desc) values('%s','%s',%d,'%s')" % (
        name, ip, port, desc))
    cur.execute("insert into hostuser(hostname,username,sudo) values('%s','%s','%d')" % (
        name, gDefaultSSHAdmin, 1))
    conn.commit()

    cur.close()
    conn.close()
    return "add host %s:%s ok" % (name, ip)


# 删除主机
def do_del_host(request):
    if request.method == "GET":
        hostname = request.args.get('name')
        ip = request.args.get('host')
    elif request.method == "POST":
        hostname = request.form["name"]
        ip = request.form["host"]
    else:
        return "invalid request for del host"

    conn, cur = get_db()
    cur.execute("delete from hosts where name='%s' and ip='%s'" %
                (hostname, ip))
    cur.execute("delete from hostuser where hostname='%s'" % hostname)
    conn.commit()

    cur.close()
    conn.close()
    return "delete host %s:%s ok" % (hostname, ip)


# 主机上添加用户
def do_host_adduser(request):
    if request.method == "GET":
        hostname = request.args.get('hostname')
        username = request.args.get('username')
    elif request.method == "POST":
        hostname = request.form["hostname"]
        username = request.form["username"]
    else:
        return "invalid request for add user to host"

    # 需求数据库
    conn, cur = get_db()
    # 检查
    cur.execute("select count(1) from hostuser where hostname='%s' and username='%s'" % (
        hostname, username))
    ret = cur.fetchone()
    if (len(ret) > 0 and ret[0]) >= 1:
        print("user(%s) exitst on host(%s)" % (username, hostname))
        return "user(%s) exitst on host(%s)" % (username, hostname)

    # 检查
    cur.execute("select ip,port from hosts where name='%s'" % (hostname))
    hostips = cur.fetchone()
    if hostips == None:
        print("host(%s) not exitst on hosts" % hostname)
        return "host(%s) not exitst on hosts" % hostname
    hostip = hostips[0]
    hostport = int(hostips[1])

    # 同步控制文件
    sync_remote_control_file(hostip, hostport)

    # 获取公钥
    status, publicSshRsaKey = exec_command_output(
        "sudo cat /home/%s/.ssh/id_rsa.pub" % username)
    if status != 0:
        print("cat user(%s) id_rsa.pub failed!", username)
        return "error %s" % publicSshRsaKey

    print("ssh %s@%s -p%d sudo sh .manager_user.sh add %s %s \"\"%s\"\"" %
          (gDefaultSSHAdmin, hostip, hostport, username, gDefaultInitPassword, publicSshRsaKey))
    # 主机上新建用户
    status, output = exec_command_output("ssh %s@%s -p%d sudo sh .manager_user.sh add %s %s \"\"%s\"\"" % (
        gDefaultSSHAdmin, hostip, hostport, username, gDefaultInitPassword, publicSshRsaKey))
    if status != 0:
        print("remote add user host(%s) user(%s) failed! => output=%s" %
              (hostname, username, output))
        return "error: remote add user host(%s) user(%s) failed! => output=%s" % (hostname, username, output)

    # 记录在数据库中
    cur.execute("insert into hostuser(hostname,username) values('%s','%s')" % (
        hostname, username))
    cur.fetchone()
    conn.commit()

    # 清理数据库
    cur.close()
    conn.close()
    print("host remote =>> add user:%s to host:%s successful [output: %s]" % (
        username, hostname, output))
    return "host remote =>> add user:%s to host:%s successful" % (username, hostname)


# 主机上删除用户
def do_host_deluser(request):
    if request.method == "GET":
        hostname = request.args.get('hostname')
        username = request.args.get('username')
    elif request.method == "POST":
        hostname = request.form["hostname"]
        username = request.form["username"]
    else:
        return "invalid request for add user to host"

    # 需求数据库
    conn, cur = get_db()

    # 检查
    cur.execute("select count(1) from hostuser where hostname='%s' and username='%s'" % (
        hostname, username))
    ret = cur.fetchone()
    if (len(ret) > 0 and ret[0]) == 0:
        print("user(%s) not exitst on host(%s)" % (username, hostname))
        return "user(%s) not exitst on host(%s)" % (username, hostname)

    # 检查
    cur.execute("select ip,port from hosts where name='%s'" % (hostname))
    hostips = cur.fetchone()
    if hostips == None:
        print("host(%s) not exitst on hosts" % hostname)
        return "host(%s) not exitst on hosts" % hostname
    hostip = hostips[0]
    hostport = int(hostips[1])

    # 同步控制文件
    sync_remote_control_file(hostip, hostport)

    # 主机上新建用户
    status, output = exec_command_output(
        "ssh %s@%s -p%d sudo sh .manager_user.sh del %s" % (gDefaultSSHAdmin, hostip, hostport, username))
    if status != 0:
        print("remote del user host(%s) user(%s) failed! => output=%s" %
              (hostname, username, output))
        return "error: remote del user host(%s) user(%s) failed! => output=%s" % (hostname, username, output)

    # 记录在数据库中
    cur.execute("delete from hostuser where hostname='%s' and username='%s'" % (
        hostname, username))
    conn.commit()

    # 清理数据库
    cur.close()
    conn.close()
    print("host remote =>> del user:%s from host:%s successful [output: %s]" % (
        username, hostname, output))
    return "host remote =>> del user:%s from host:%s successful" % (username, hostname)

# 主机上修改用户信息
def do_host_modifyuser(request):
    if request.method == "GET":
        hostname = request.args.get('hostname')
        username = request.args.get('username')
        sudo = int(request.args.get('sudo'))
        desc = request.args.get('desc')
    elif request.method == "POST":
        hostname = request.form["hostname"]
        username = request.form["username"]
        sudo = int(request.form["username"])
        desc = request.form["desc"]
    else:
        return "invalid request for add user to host"

    # 需求数据库
    conn, cur = get_db()

    # 检查
    cur.execute("select sudo,desc from hostuser where hostname='%s' and username='%s' and isdelete=0" % (
        hostname, username))
    hostusers = cur.fetchone()
    if len(hostusers) > 0 and hostusers[0] != None:
        print("user(%s) not exitst on host(%s)" % (username, hostname))
        return "user(%s) not exitst on host(%s)" % (username, hostname)

    hostuser = hostusers[0]

    user_sudo = hostuser[0]
    user_desc = hostuser[1]
    change = False
    opParam = "sudo"

    if sudo == 0:
        opParam = "unsudo"

    if sudo != user_sudo:
        change = True

        # 检查
        cur.execute("select ip,port from hosts where name='%s'" % (hostname))
        hostips = cur.fetchone()
        if hostips == None:
            print("host(%s) not exitst on hosts" % hostname)
            return "host(%s) not exitst on hosts" % hostname

        hostip = hostips[0]
        hostport = int(hostips[1])

        # 主机上修改sudo
        status, output = exec_command_output(
            "ssh %s@%s -p%d sudo sh .manager_user.sh %s %s" % (gDefaultSSHAdmin, hostip, hostport, opParam, username))
        if status != 0:
            print("remote %s user host(%s) user(%s) failed! => output=%s" %
                  (opParam, hostname, username, output))
            return "error: remote %s user host(%s) user(%s) failed! => output=%s" % (opParam, hostname, username, output)

    if desc != user_desc:
        change = True

    if change:
        # 记录在数据库中
        cur.execute("update hostuser set sudo=%d,desc=%s where hostname='%s' and username='%s'" % (
            sudo, desc, hostname, username))
        conn.commit()

    # 清理数据库
    cur.close()
    conn.close()
    print("host remote =>> %s user:%s from host:%s successful [output: %s]" % (
        opParam, username, hostname, output))
    return "host remote =>> %s user:%s from host:%s successful [output: %s]" % (opParam, username, hostname, output)


# 获取用户所有的主机列表
def do_userhostlist(request):
    if request.method == "GET":
        username = request.args.get('username')
    elif request.method == "POST":
        username = request.form["username"]
    else:
        return "invalid request for getting user host list"

    conn, cur = get_db()
    cur.execute("select id,name,ip,port,desc,date from hosts where isdelete=0 and name in (select hostname from hostuser where username='%s')" % username)
    hosts = cur.fetchall()
    cur.close()
    conn.close()

    resp = []
    for host in hosts:
        res = {}
        res["id"] = host[0]
        res["name"] = host[1]
        res["ip"] = host[2]
        res["port"] = host[3]
        res["desc"] = host[4]
        res["ctime"] = host[5]
        resp.append(res)
    return json.dumps(resp)


# 获取主机上的用户列表
def do_hostuserlist(request):
    if request.method == "GET":
        hostname = request.args.get('hostname')
    elif request.method == "POST":
        hostname = request.form["hostname"]
    else:
        return "invalid request for getting host user list"

    conn, cur = get_db()
    cur.execute(
        "select id,username,sudo,date from hostuser where isdelete=0 and hostname='%s'" % hostname)
    users = cur.fetchall()
    cur.close()
    conn.close()

    resp = []
    for user in users:
        res = {}
        res["id"] = user[0]
        res["username"] = user[1]
        res["sudo"] = user[2]
        res["ctime"] = user[3]
        resp.append(res)
    return json.dumps(resp)


# 获取所有的用户主机列表
def do_hostuserall(request):
    conn, cur = get_db()
    cur.execute(
        "select id,hostname,username,sudo,date from hostuser where isdelete=0")
    users = cur.fetchall()
    cur.close()
    conn.close()

    resp = []
    for user in users:
        res = {}
        res["id"] = user[0]
        res["hostname"] = user[1]
        res["username"] = user[2]
        res["sudo"] = user[3]
        res["ctime"] = user[4]
        resp.append(res)
    return json.dumps(resp)


# 连接数据库
def get_db():
    conn = sqlite3.connect('/usr/local/jumpserver/jumpserver.db')
    curr = conn.cursor()
    return conn, curr


# 初始化表
def init_db():
    # 连接数据库
    conn, _ = get_db()
    if conn == None:
        sys.exit(1)

    # 初始化表
    conn.execute(gUsersTableSql)
    conn.execute(gHostsTableSql)
    # 创建主机数据库
    conn.execute(gHostUserSql)


# sso本地管理
def sso_timeout():
    # 当前时间戳
    nowtime = int(time.time())
    # 需求删除的key
    delkeys = []
    for sso_uid, sso_info in gSsoManager.items():
        if nowtime - sso_info["update_time"] >= SSO_EXPIRE_TIMEOUT:
            delkeys.append(sso_uid)

    # 删除key
    for key in delkeys:
        del gSsoManager[key]

    # 循环定时器
    Timer(SSO_TIMER_PERIOD, sso_timeout).start()


def main():
    # 解析命令行
    parse_cmd()

    # 初始化db
    init_db()

    # 启动sso定时器 秒
    Timer(SSO_TIMER_PERIOD, sso_timeout).start()

    # 启动HTTP服务
    app.run(
        host=gHost,
        port=gPort,
        debug=gDebug
    )


# 入口
if __name__ == '__main__':
    main()