617a2433a3
* Start to move to internal/private * Add GetPublicKeyByID * Add HasDeployKey * Add private.UpdateDeployKeyUpdated * Add private.GetUserByKeyID * Add private.AccessLevel * Add private.CheckUnitUser * Fix mistakes I made * Some cleaning + moving code to separate files * Fix error handling * Remove useless error handling for setup * lint: fix comment on exported func * fix copyright header * Fix order of args
98 lines
3 KiB
Go
98 lines
3 KiB
Go
// Copyright 2017 The Gitea Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Package private includes all internal routes. The package name internal is ideal but Golang is not allowed, so we use private as package name instead.
|
|
package private
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"code.gitea.io/gitea/models"
|
|
"code.gitea.io/gitea/modules/setting"
|
|
|
|
macaron "gopkg.in/macaron.v1"
|
|
)
|
|
|
|
// CheckInternalToken check internal token is set
|
|
func CheckInternalToken(ctx *macaron.Context) {
|
|
tokens := ctx.Req.Header.Get("Authorization")
|
|
fields := strings.Fields(tokens)
|
|
if len(fields) != 2 || fields[0] != "Bearer" || fields[1] != setting.InternalToken {
|
|
ctx.Error(403)
|
|
}
|
|
}
|
|
|
|
//GetRepositoryByOwnerAndName chainload to models.GetRepositoryByOwnerAndName
|
|
func GetRepositoryByOwnerAndName(ctx *macaron.Context) {
|
|
//TODO use repo.Get(ctx *context.APIContext) ?
|
|
ownerName := ctx.Params(":owner")
|
|
repoName := ctx.Params(":repo")
|
|
repo, err := models.GetRepositoryByOwnerAndName(ownerName, repoName)
|
|
if err != nil {
|
|
ctx.JSON(500, map[string]interface{}{
|
|
"err": err.Error(),
|
|
})
|
|
return
|
|
}
|
|
ctx.JSON(200, repo)
|
|
}
|
|
|
|
//AccessLevel chainload to models.AccessLevel
|
|
func AccessLevel(ctx *macaron.Context) {
|
|
repoID := ctx.ParamsInt64(":repoid")
|
|
userID := ctx.ParamsInt64(":userid")
|
|
repo, err := models.GetRepositoryByID(repoID)
|
|
if err != nil {
|
|
ctx.JSON(500, map[string]interface{}{
|
|
"err": err.Error(),
|
|
})
|
|
return
|
|
}
|
|
al, err := models.AccessLevel(userID, repo)
|
|
if err != nil {
|
|
ctx.JSON(500, map[string]interface{}{
|
|
"err": err.Error(),
|
|
})
|
|
return
|
|
}
|
|
ctx.JSON(200, al)
|
|
}
|
|
|
|
//CheckUnitUser chainload to models.CheckUnitUser
|
|
func CheckUnitUser(ctx *macaron.Context) {
|
|
repoID := ctx.ParamsInt64(":repoid")
|
|
userID := ctx.ParamsInt64(":userid")
|
|
repo, err := models.GetRepositoryByID(repoID)
|
|
if err != nil {
|
|
ctx.JSON(500, map[string]interface{}{
|
|
"err": err.Error(),
|
|
})
|
|
return
|
|
}
|
|
if repo.CheckUnitUser(userID, ctx.QueryBool("isAdmin"), models.UnitType(ctx.QueryInt("unitType"))) {
|
|
ctx.PlainText(200, []byte("success"))
|
|
return
|
|
}
|
|
ctx.PlainText(404, []byte("no access"))
|
|
}
|
|
|
|
// RegisterRoutes registers all internal APIs routes to web application.
|
|
// These APIs will be invoked by internal commands for example `gitea serv` and etc.
|
|
func RegisterRoutes(m *macaron.Macaron) {
|
|
m.Group("/", func() {
|
|
m.Get("/ssh/:id", GetPublicKeyByID)
|
|
m.Get("/ssh/:id/user", GetUserByKeyID)
|
|
m.Post("/ssh/:id/update", UpdatePublicKey)
|
|
m.Post("/repositories/:repoid/keys/:keyid/update", UpdateDeployKey)
|
|
m.Get("/repositories/:repoid/user/:userid/accesslevel", AccessLevel)
|
|
m.Get("/repositories/:repoid/user/:userid/checkunituser", CheckUnitUser)
|
|
m.Get("/repositories/:repoid/has-keys/:keyid", HasDeployKey)
|
|
m.Post("/push/update", PushUpdate)
|
|
m.Get("/protectedbranch/:pbid/:userid", CanUserPush)
|
|
m.Get("/repo/:owner/:repo", GetRepositoryByOwnerAndName)
|
|
m.Get("/branch/:id/*", GetProtectedBranchBy)
|
|
m.Get("/repository/:rid", GetRepository)
|
|
m.Get("/active-pull-request", GetActivePullRequest)
|
|
}, CheckInternalToken)
|
|
}
|