234 lines
8.2 KiB
Python
234 lines
8.2 KiB
Python
import json
|
|
import logging
|
|
from datetime import datetime
|
|
|
|
# Configure logging
|
|
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
|
|
|
|
# def write_to_json(app_registrations, filename='app_registrations.json'):
|
|
# """
|
|
# Write app registration data to a JSON file.
|
|
|
|
# :param app_registrations: List of app registration data
|
|
# :param filename: Name of the JSON file to write to
|
|
# """
|
|
# try:
|
|
# with open(filename, 'w') as f:
|
|
# json.dump(app_registrations, f, indent=4)
|
|
# logging.info(f"App registration data successfully written to {filename}")
|
|
# except Exception as e:
|
|
# logging.error(f"Failed to write app registration data to {filename}: {e}")
|
|
|
|
def generate_html(app_registrations):
|
|
"""
|
|
Generate an HTML representation of the app registration data.
|
|
|
|
:param app_registrations: List of app registration data
|
|
:return: HTML string
|
|
"""
|
|
current_time = datetime.utcnow().strftime('%Y-%m-%d %H:%M:%S')
|
|
html = f"""
|
|
<html>
|
|
<head>
|
|
<title>App Registrations</title>
|
|
<style>
|
|
body {{
|
|
font-family: Arial, sans-serif;
|
|
margin: 20px;
|
|
color: #333;
|
|
}}
|
|
.intro {{
|
|
margin-bottom: 20px;
|
|
line-height: 1.5;
|
|
}}
|
|
table {{
|
|
width: 100%;
|
|
border-collapse: collapse;
|
|
}}
|
|
th, td {{
|
|
border: 1px solid black;
|
|
padding: 8px;
|
|
text-align: left;
|
|
}}
|
|
th {{
|
|
background-color: #f2f2f2;
|
|
}}
|
|
.green {{
|
|
background-color: #d4edda;
|
|
}}
|
|
.yellow {{
|
|
background-color: #fff3cd;
|
|
}}
|
|
.orange {{
|
|
background-color: #ffeeba;
|
|
}}
|
|
.red {{
|
|
background-color: #f8d7da;
|
|
}}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div class="intro">
|
|
<h2>Azure App Registration Expiry Notification</h2>
|
|
<p>This is an automated notification regarding expiring Azure App Registrations that you own or manage.</p>
|
|
|
|
<p><strong>Why am I receiving this?</strong><br>
|
|
You are receiving this email because you are listed as an owner of one or more Azure App Registrations that are approaching their expiration date or have already expired.</p>
|
|
|
|
<p><strong>Required Actions:</strong></p>
|
|
<ul>
|
|
<li>Review the list of app registrations below</li>
|
|
<li>For any expiring or expired registrations:
|
|
<ul>
|
|
<li>Verify if the app registration is still needed</li>
|
|
<li>If needed, renew the credentials before they expire</li>
|
|
<li>If not needed, consider removing the app registration</li>
|
|
</ul>
|
|
</li>
|
|
</ul>
|
|
|
|
<p><strong>Color Coding:</strong></p>
|
|
<ul>
|
|
<li style="background-color: #d4edda; padding: 3px;">Green: More than 30 days until expiry</li>
|
|
<li style="background-color: #fff3cd; padding: 3px;">Yellow: Between 8-30 days until expiry</li>
|
|
<li style="background-color: #ffeeba; padding: 3px;">Orange: 7 days or less until expiry</li>
|
|
<li style="background-color: #f8d7da; padding: 3px;">Red: Expired</li>
|
|
</ul>
|
|
|
|
<p>If you need assistance, please contact the IT Support team.</p>
|
|
</div>
|
|
|
|
<h1>App Registrations</h1>
|
|
<p>Exported on: {current_time}</p>
|
|
<table>
|
|
<tr>
|
|
<th>Display Name</th>
|
|
<th>Expiry Date</th>
|
|
<th>Days to Expiry</th>
|
|
<th>Owners</th>
|
|
</tr>
|
|
"""
|
|
|
|
for app in app_registrations:
|
|
password_credentials = app.get('passwordCredentials', [])
|
|
if not password_credentials:
|
|
continue
|
|
|
|
expiry_date = password_credentials[0].get('endDateTime')
|
|
if expiry_date:
|
|
# Clean up the date string
|
|
if expiry_date.endswith('ZZ'):
|
|
expiry_date = expiry_date[:-1]
|
|
elif expiry_date.endswith('Z'):
|
|
expiry_date = expiry_date[:-1]
|
|
# Truncate the fractional seconds part to 6 digits if present
|
|
if '.' in expiry_date:
|
|
expiry_date = expiry_date.split('.')[0] + '.' + expiry_date.split('.')[1][:6] + 'Z'
|
|
else:
|
|
expiry_date += '.000000Z'
|
|
try:
|
|
expiry_date = datetime.strptime(expiry_date, '%Y-%m-%dT%H:%M:%S.%fZ')
|
|
except ValueError as e:
|
|
logging.error(f"Error parsing expiry date for {app['displayName']}: {e}")
|
|
continue
|
|
days_to_expiry = (expiry_date - datetime.utcnow()).days
|
|
|
|
# Determine row color class
|
|
if days_to_expiry > 30:
|
|
color_class = "green"
|
|
elif 7 < days_to_expiry <= 30:
|
|
color_class = "yellow"
|
|
elif 1 <= days_to_expiry <= 7:
|
|
color_class = "orange"
|
|
else:
|
|
color_class = "red"
|
|
days_to_expiry = "EXPIRED"
|
|
|
|
# Get owner information
|
|
owners = app.get('owners', [])
|
|
owner_upns = [owner.get('userPrincipalName') for owner in owners if owner.get('userPrincipalName')]
|
|
owner_list = ', '.join(owner_upns) if owner_upns else 'No owners'
|
|
|
|
html += f"""
|
|
<tr class="{color_class}">
|
|
<td>{app['displayName']}</td>
|
|
<td>{expiry_date.strftime('%Y-%m-%d')}</td>
|
|
<td>{days_to_expiry}</td>
|
|
<td>{owner_list}</td>
|
|
</tr>
|
|
"""
|
|
|
|
html += """
|
|
</table>
|
|
</body>
|
|
</html>
|
|
"""
|
|
|
|
return html
|
|
|
|
def generate_expiry_text(app_name, days_to_expiry, expiry_date):
|
|
if days_to_expiry > 30:
|
|
color = "#28a745" # green
|
|
elif days_to_expiry > 7:
|
|
color = "#ffc107" # yellow
|
|
elif days_to_expiry > 0:
|
|
color = "#ff9800" # orange
|
|
else:
|
|
color = "#dc3545" # red
|
|
days_to_expiry = "EXPIRED"
|
|
|
|
return f"""
|
|
<div style="font-size: 26px; margin-bottom: 20px;">
|
|
<p>The app registration <strong>{app_name}</strong> is set to expire in
|
|
<span style="color: {color}; font-weight: bold; font-size: 28px;">
|
|
{days_to_expiry}
|
|
</span>
|
|
days on <strong>{expiry_date.strftime('%Y-%m-%d')}</strong></p>
|
|
</div>
|
|
"""
|
|
|
|
def sort_app_registrations(app_registrations):
|
|
current_date = datetime.utcnow()
|
|
for app in app_registrations:
|
|
expiry_date_str = app["passwordCredentials"][0]["endDateTime"]
|
|
expiry_date = datetime.strptime(expiry_date_str.split('.')[0], '%Y-%m-%dT%H:%M:%S')
|
|
days_to_expiry = (expiry_date - current_date).days
|
|
app["days_to_expiry"] = days_to_expiry
|
|
app["expiry_date"] = expiry_date
|
|
|
|
sorted_apps = sorted(app_registrations, key=lambda x: x["days_to_expiry"], reverse=False)
|
|
return sorted_apps
|
|
|
|
# Example usage
|
|
if __name__ == "__main__":
|
|
# Sample app registration data
|
|
app_registrations = [
|
|
{
|
|
"displayName": "App1",
|
|
"passwordCredentials": [{"endDateTime": "2024-12-31T23:59:59.9999999Z"}]
|
|
},
|
|
{
|
|
"displayName": "App2",
|
|
"passwordCredentials": [{"endDateTime": "2023-12-31T23:59:59.9999999Z"}]
|
|
},
|
|
{
|
|
"displayName": "App3",
|
|
"passwordCredentials": [{"endDateTime": "2025-01-15T23:59:59.9999999Z"}]
|
|
}
|
|
]
|
|
|
|
sorted_apps = sort_app_registrations(app_registrations)
|
|
html_output = ""
|
|
for app in sorted_apps:
|
|
html_output += generate_expiry_text(app["displayName"], app["days_to_expiry"], app["expiry_date"])
|
|
|
|
print(html_output)
|
|
|
|
# Write to JSON
|
|
write_to_json(app_registrations)
|
|
|
|
# Generate HTML
|
|
html_content = generate_html(app_registrations)
|
|
with open('app_registrations.html', 'w') as f:
|
|
f.write(html_content)
|
|
logging.info("HTML content successfully written to app_registrations.html") |