feat: instruct создаёт SD заявку при отсутствии 2FA

instruct/handlers.py

@@ -8,8 +8,12 @@ from utils.texts import (
 )
 import logging
 import asyncio
+import httpx
+import json
+import os
 
 from trueconf import Router, Message
+from trueconf.types import FSInputFile
 
 from utils.states import get_state, set_state, clear_state
 
@@ -18,8 +22,26 @@ from utils.stats_logger import log_menu_stats
 
 logger = logging.getLogger(__name__)
 
+
+async def sd_create_ticket(login: str, subject: str, description: str) -> str:
+    """Создать заявку в SD."""
+    from config.config import SD_URL, SD_TOKEN
+    headers = {"authtoken": SD_TOKEN, "Accept": "application/vnd.manageengine.sdp.v3+json"}
+    endpoint = f"{SD_URL}/api/v3/requests"
+    html_desc = f"<p>{description}</p><br><hr><p style='color:#555;font-size:12px;'><i>Создано через TrueConf КЛЕВЕР</i></p>"
+    payload = {"request": {"subject": subject, "description": html_desc, "requester": {"email_id": None}, "udf_fields": {}}}
+    async with httpx.AsyncClient(verify=False) as client:
+        resp = await client.post(endpoint, headers=headers, data={"input_data": json.dumps(payload)}, timeout=15.0)
+    data = resp.json()
+    if data.get("response_status", {}).get("status_code") == 2000:
+        return str(data.get("request", {}).get("id"))
+    return None
+
 router = Router()
 
+# Путь к файлу инструкции Trueconf
+TRUECONF_INSTRUCT_PATH = os.path.join(os.path.dirname(__file__), "Проверка_наличия_и_авторизация_на_мобильном_устройстве_Trueconf.docx")
+
 
 def get_user_cn(user_id: str) -> str | None:
     """
@@ -94,8 +116,23 @@ async def instruct_router_handler(msg: Message):
             log_menu_stats(user_id, "Инструкции", "Trueconf")
             set_state(user_id, "INSTRUCT_TRUECONF_VIEW")
             cn = get_user_cn(user_id)
-            text = INSTRUCT_TRUECONF_WITH_AD(EMOJI_DIGITS, cn)
+            login = user_id.split("@")[0] if "@" in user_id else user_id
+            ticket_id = None
+            try:
+                from utils.ad_checker import check_group_membership
+                result = check_group_membership(cn, "2FA")
+                if not result.get("in_group", True):
+                    subject = f"Запрос доступа к Trueconf"
+                    description = f"Пользователь {cn} ({user_id}) запросил инструкцию по Trueconf, но не имеет группы 2FA. Требуется выдача доступа."
+                    ticket_id = await sd_create_ticket(login, subject, description)
+                    logger.info(f"SD ticket created for {cn}: #{ticket_id}")
+            except Exception as e:
+                logger.error(f"Ошибка создания SD заявки: {e}", exc_info=True)
+                ticket_id = None
+            text = INSTRUCT_TRUECONF_WITH_AD(EMOJI_DIGITS, cn, ticket_id)
             await msg.answer(text, parse_mode="html")
+            if os.path.isfile(TRUECONF_INSTRUCT_PATH):
+                await msg.answer_document(FSInputFile(TRUECONF_INSTRUCT_PATH))
         elif cmd == "2":
             log_menu_stats(user_id, "Инструкции", "Почта")
             set_state(user_id, "INSTRUCT_EMAIL_VIEW")