perf: 检测不常用账号 (#11205)

Co-authored-by: feng <1304903146@qq.com>

apps/users/tasks.py

@@ -2,15 +2,18 @@
 #
 
 from celery import shared_task
+from django.conf import settings
+from django.db.models import Max
 from django.utils import timezone
 from django.utils.translation import gettext_lazy as _
 
+from audits.models import UserLoginLog
 from common.const.crontab import CRONTAB_AT_AM_TEN, CRONTAB_AT_PM_TWO
 from common.utils import get_logger
-from ops.celery.decorator import after_app_ready_start
-from ops.celery.utils import (
-    create_or_update_celery_periodic_tasks
-)
+from common.utils.timezone import utc_now
+from ops.celery.decorator import after_app_ready_start, register_as_period_task
+from ops.celery.utils import create_or_update_celery_periodic_tasks
+from orgs.utils import tmp_to_root_org
 from users.notifications import PasswordExpirationReminderMsg
 from users.notifications import UserExpirationReminderMsg
 from .models import User
@@ -75,3 +78,23 @@ def check_user_expired_periodic():
         }
     }
     create_or_update_celery_periodic_tasks(tasks)
+
+
+@shared_task(verbose_name=_('Check unused users'))
+@register_as_period_task(crontab=CRONTAB_AT_PM_TWO)
+@tmp_to_root_org()
+def check_unused_users():
+    now = utc_now()
+    unused_usernames = []
+    usernames_max_datetime = UserLoginLog.objects.values('username').annotate(max_datetime=Max('datetime'))
+    for i in usernames_max_datetime:
+        username = i['username']
+        max_datetime = i['max_datetime']
+        uncommon_users_ttl = settings.SECURITY_UNCOMMON_USERS_TTL
+        if (now - max_datetime).seconds > uncommon_users_ttl * 24 * 60 * 60:
+            unused_usernames.append(username)
+
+    if not unused_usernames:
+        return
+
+    User.objects.filter(username__in=unused_usernames).update(is_active=False)