Impl: signature in periodic task

AUTHORS

@@ -92,3 +92,4 @@ Wes Winham <[email protected]>
 Williams Mendez <[email protected]>
 WoLpH <[email protected]>
 dongweiming <[email protected]>
+SunnyCapt <[email protected]>

django_celery_beat/admin.py

@@ -69,6 +69,7 @@ class PeriodicTaskForm(forms.ModelForm):
         required=False,
         max_length=200,
     )
+    # todo: add field for task_signature
 
     class Meta:
         """Form metadata."""
@@ -198,19 +199,26 @@ def toggle_tasks(self, request, queryset):
 
     def run_tasks(self, request, queryset):
         self.celery_app.loader.import_default_modules()
-        tasks = [(self.celery_app.tasks.get(task.task),
-                  loads(task.args),
-                  loads(task.kwargs),
-                  task.queue)
-                 for task in queryset]
+        tasks = [
+            (
+                task.get_verified_task_signature(raise_exceptions=False)
+                if task.task_signature is not None
+                else self.celery_app.tasks.get(task.task),
+                loads(task.args),
+                loads(task.kwargs),
+                task.queue
+            ) for task in queryset
+        ]
 
         if any(t[0] is None for t in tasks):
             for i, t in enumerate(tasks):
                 if t[0] is None:
                     break
 
             # variable "i" will be set because list "tasks" is not empty
-            not_found_task_name = queryset[i].task
+            not_found_task_name = queryset[i].get_verified_task_signature(raise_exceptions=False).name \
+                if queryset[i].task_signature is not None and queryset[i].get_verified_task_signature(
+                raise_exceptions=False) is not None else queryset[i].task
 
             self.message_user(
                 request,
@@ -222,7 +230,7 @@ def run_tasks(self, request, queryset):
         task_ids = [task.apply_async(args=args, kwargs=kwargs, queue=queue)
                     if queue and len(queue)
                     else task.apply_async(args=args, kwargs=kwargs)
-                    for task, args, kwargs, queue in tasks]
+                    for task, args, kwargs, queue in tasks if task is not None]
         tasks_run = len(task_ids)
         self.message_user(
             request,

django_celery_beat/migrations/0015_periodictask_task_signature.py

@@ -0,0 +1,23 @@
+# Generated by Django 2.2.16 on 2020-09-01 10:17
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('django_celery_beat', '0014_remove_clockedschedule_enabled'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='periodictask',
+            name='task_signature',
+            field=models.BinaryField(help_text="Serialized `celery.canvas.Signature` type's object of task (or chain, group, etc.) got by https://pypi.org/project/dill/", null=True),
+        ),
+        migrations.AddField(
+            model_name='periodictask',
+            name='task_signature_sign',
+            field=models.CharField(help_text="Signature (in hex) of serialized `celery.canvas.Signature` type's object (see task_signature field)", max_length=1028, null=True),
+        ),
+    ]

django_celery_beat/migrations/0016_auto_20200903_1356.py

@@ -0,0 +1,23 @@
+# Generated by Django 2.2.16 on 2020-09-03 13:56
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('django_celery_beat', '0015_periodictask_task_signature'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='periodictask',
+            name='callback_signature',
+            field=models.BinaryField(help_text="Serialized `celery.canvas.Signature` type's callback task got by https://pypi.org/project/dill/ (use as link arg in `.apply_async` method)", null=True),
+        ),
+        migrations.AddField(
+            model_name='periodictask',
+            name='callback_signature_sign',
+            field=models.CharField(help_text="Signature (in hex) of serialized `celery.canvas.Signature` type's callback task (see callback_signature field)", max_length=1028, null=True),
+        ),
+    ]

django_celery_beat/models.py

@@ -1,8 +1,10 @@
 """Database models."""
 from datetime import timedelta
 
+import dill
 import timezone_field
 from celery import schedules, current_app
+from celery.utils.log import get_logger
 from django.conf import settings
 from django.core.exceptions import MultipleObjectsReturned, ValidationError
 from django.core.validators import MaxValueValidator, MinValueValidator
@@ -11,10 +13,11 @@
 from django.utils.translation import gettext_lazy as _
 
 from . import managers, validators
-from .tzcrontab import TzAwareCrontab
-from .utils import make_aware, now
 from .clockedschedule import clocked
+from .tzcrontab import TzAwareCrontab
+from .utils import make_aware, now, verify_task_signature
 
+logger = get_logger(__name__)
 
 DAYS = 'days'
 HOURS = 'hours'
@@ -388,6 +391,27 @@ class PeriodicTask(models.Model):
         help_text=_('The Name of the Celery Task that Should be Run.  '
                     '(Example: "proj.tasks.import_contacts")'),
     )
+    task_signature = models.BinaryField(
+        null=True,
+        help_text='Serialized `celery.canvas.Signature` type\'s object of task (or chain, group, '
+                  'etc.) got by https://pypi.org/project/dill/'
+    )
+    callback_signature = models.BinaryField(
+        null=True,
+        help_text='Serialized `celery.canvas.Signature` type\'s callback task got '
+                  'by https://pypi.org/project/dill/ (use as link arg in `.apply_async` method)'
+    )  # todo: add support for error_callback (link_error option)
+    task_signature_sign = models.CharField(
+        null=True,
+        max_length=1028,
+        help_text='Signature (in hex) of serialized `celery.canvas.Signature` type\'s object (see task_signature field)'
+    )
+    callback_signature_sign = models.CharField(
+        null=True,
+        max_length=1028,
+        help_text='Signature (in hex) of serialized `celery.canvas.Signature` type\'s callback '
+                  'task (see callback_signature field)'
+    )
 
     # You can only set ONE of the following schedule FK's
     # TODO: Redo this as a GenericForeignKey
@@ -548,8 +572,8 @@ def validate_unique(self, *args, **kwargs):
                 'must be set.'
             )
 
-        err_msg = 'Only one of clocked, interval, crontab, '\
-            'or solar must be set'
+        err_msg = 'Only one of clocked, interval, crontab, ' \
+                  'or solar must be set'
         if len(selected_schedule_types) > 1:
             error_info = {}
             for selected_schedule_type in selected_schedule_types:
@@ -578,6 +602,53 @@ def _clean_expires(self):
                 _('Only one can be set, in expires and expire_seconds')
             )
 
+    def get_verified_task_signature(self, raise_exceptions=True):
+        try:
+            self.get_verified_callback_signature()
+        except ValueError as e:
+            err = 'Wrong callback: {} [{}]'.format(e, self)
+            logger.error(err)
+            if raise_exceptions:
+                raise ValueError(err)
+            return None
+
+        return self._get_verified_obj_signature('task', raise_exceptions)
+
+    def get_verified_callback_signature(self, raise_exceptions=True):
+        return self._get_verified_obj_signature('callback', raise_exceptions)
+
+    def _get_verified_obj_signature(self, object_name, raise_exceptions):
+        assert object_name in ('task', 'callback'), ValueError('Unknown object_name')
+
+        obj_signarute = getattr(self, '{}_signature'.format(object_name), None)
+        obj_signarute_sign = getattr(self, '{}_signature_sign'.format(object_name), None)
+
+        if obj_signarute is None:
+            return None
+
+        if obj_signarute_sign is None:
+            err = 'Not found `{}_signature_sign` for `{}` (use django_celery_be' \
+                  'at.utils.sign to sign). Task disabled.'.format(object_name, self)
+            self.enabled = False
+            self.save(update_fields=['enabled'])
+            logger.error(err)
+            if raise_exceptions:
+                raise ValueError(err)
+            return None
+
+        obj_signarute = bytes(obj_signarute)
+
+        if not verify_task_signature(obj_signarute, obj_signarute_sign):
+            err = 'Wrong sign for `{}`. Task disabled.'.format(self)
+            self.enabled = False
+            self.save(update_fields=['enabled'])
+            logger.error(err)
+            if raise_exceptions:
+                raise ValueError(err)
+            return None
+
+        return dill.loads(obj_signarute)
+
     @property
     def expires_(self):
         return self.expires or self.expire_seconds

django_celery_beat/schedulers.py

@@ -1,23 +1,33 @@
 """Beat Scheduler Implementation."""
+from __future__ import absolute_import, unicode_literals
+
 import datetime
 import logging
 import math
-
-from multiprocessing.util import Finalize
+import sys
 
 from celery import current_app
 from celery import schedules
-from celery.beat import Scheduler, ScheduleEntry
-
+# noinspection PyProtectedMember
+from celery.beat import Scheduler, ScheduleEntry, SchedulingError, BeatLazyFunc
+# noinspection PyUnresolvedReferences
+from celery.five import (
+    items, monotonic, python_2_unicode_compatible,
+    reraise, values
+)
+from celery.utils.encoding import safe_str, safe_repr
 from celery.utils.log import get_logger
 from celery.utils.time import maybe_make_aware
 from kombu.utils.encoding import safe_str, safe_repr
 from kombu.utils.json import dumps, loads
 
 from django.conf import settings
+# noinspection PyProtectedMember
 from django.db import transaction, close_old_connections
 from django.db.utils import DatabaseError, InterfaceError
 from django.core.exceptions import ObjectDoesNotExist
+# noinspection PyUnresolvedReferences
+from multiprocessing.util import Finalize
 
 from .models import (
     PeriodicTask, PeriodicTasks,
@@ -56,6 +66,8 @@ def __init__(self, model, app=None):
         self.app = app or current_app._get_current_object()
         self.name = model.name
         self.task = model.task
+        self.task_signature = model.get_verified_task_signature()
+
         try:
             self.schedule = model.schedule
         except model.DoesNotExist:
@@ -74,7 +86,10 @@ def __init__(self, model, app=None):
             )
             self._disable(model)
 
-        self.options = {}
+        self.options = {
+            'link': model.get_verified_callback_signature()
+        }
+
         for option in ['queue', 'exchange', 'routing_key', 'priority']:
             value = getattr(model, option)
             if value is None:
@@ -368,3 +383,30 @@ def schedule(self):
                     repr(entry) for entry in self._schedule.values()),
                 )
         return self._schedule
+
+    def apply_async(self, entry, producer=None, advance=True, **kwargs):
+        # Update time-stamps and run counts before we actually execute,
+        # so we have that done if an exception is raised (doesn't schedule
+        # forever.)
+        entry = self.reserve(entry) if advance else entry
+        task = entry.task_signature if entry.task_signature is not None else self.app.tasks.get(entry.task)
+
+        try:
+            entry_args = [v() if isinstance(v, BeatLazyFunc) else v for v in (entry.args or [])]
+            entry_kwargs = {k: v() if isinstance(v, BeatLazyFunc) else v for k, v in entry.kwargs.items()}
+            if task:
+                return task.apply_async(entry_args, entry_kwargs,
+                                        producer=producer,
+                                        **entry.options)
+            else:
+                return self.send_task(entry.task, entry_args, entry_kwargs,
+                                      producer=producer,
+                                      **entry.options)
+        except Exception as exc:  # pylint: disable=broad-except
+            reraise(SchedulingError, SchedulingError(
+                "Couldn't apply scheduled task {0.name}: {exc}".format(
+                    entry, exc=exc)), sys.exc_info()[2])
+        finally:
+            self._tasks_since_sync += 1
+            if self.should_sync():
+                self._do_sync()