debian-mirror-gitlab/app/models/deploy_token.rb

91 lines
2.1 KiB
Ruby
Raw Normal View History

2018-11-18 11:00:15 +05:30
# frozen_string_literal: true
2019-07-07 11:18:12 +05:30
class DeployToken < ApplicationRecord
2018-05-09 12:01:36 +05:30
include Expirable
include TokenAuthenticatable
2018-11-18 11:00:15 +05:30
include PolicyActor
2018-12-13 13:39:08 +05:30
include Gitlab::Utils::StrongMemoize
2019-12-04 20:38:33 +05:30
add_authentication_token_field :token, encrypted: :optional
2018-05-09 12:01:36 +05:30
AVAILABLE_SCOPES = %i(read_repository read_registry).freeze
2019-12-04 20:38:33 +05:30
GITLAB_DEPLOY_TOKEN_NAME = 'gitlab-deploy-token'
2018-05-09 12:01:36 +05:30
default_value_for(:expires_at) { Forever.date }
has_many :project_deploy_tokens, inverse_of: :deploy_token
has_many :projects, through: :project_deploy_tokens
validate :ensure_at_least_one_scope
2019-09-30 21:07:59 +05:30
validates :username,
length: { maximum: 255 },
allow_nil: true,
format: {
with: /\A[a-zA-Z0-9\.\+_-]+\z/,
message: "can contain only letters, digits, '_', '-', '+', and '.'"
}
2018-05-09 12:01:36 +05:30
before_save :ensure_token
accepts_nested_attributes_for :project_deploy_tokens
scope :active, -> { where("revoked = false AND expires_at >= NOW()") }
2018-10-15 14:42:47 +05:30
def self.gitlab_deploy_token
active.find_by(name: GITLAB_DEPLOY_TOKEN_NAME)
end
2018-05-09 12:01:36 +05:30
def revoke!
update!(revoked: true)
end
def active?
2018-11-18 11:00:15 +05:30
!revoked && !expired?
2018-05-09 12:01:36 +05:30
end
def scopes
AVAILABLE_SCOPES.select { |token_scope| read_attribute(token_scope) }
end
def username
2019-09-30 21:07:59 +05:30
super || default_username
2018-05-09 12:01:36 +05:30
end
def has_access_to?(requested_project)
active? && project == requested_project
end
# This is temporal. Currently we limit DeployToken
# to a single project, later we're going to extend
# that to be for multiple projects and namespaces.
def project
2018-12-13 13:39:08 +05:30
strong_memoize(:project) do
projects.first
end
2018-05-09 12:01:36 +05:30
end
def expires_at
expires_at = read_attribute(:expires_at)
expires_at != Forever.date ? expires_at : nil
end
def expires_at=(value)
write_attribute(:expires_at, value.presence || Forever.date)
end
private
2018-11-18 11:00:15 +05:30
def expired?
return false unless expires_at
expires_at < Date.today
end
2018-05-09 12:01:36 +05:30
def ensure_at_least_one_scope
errors.add(:base, "Scopes can't be blank") unless read_repository || read_registry
end
2019-09-30 21:07:59 +05:30
def default_username
"gitlab+deploy-token-#{id}" if persisted?
end
2018-05-09 12:01:36 +05:30
end