88 lines
1.8 KiB
Ruby
88 lines
1.8 KiB
Ruby
|
# == Schema Information
|
||
|
|
#
|
||
|
|
# Table name: keys
|
||
|
|
#
|
||
|
|
# id :integer not null, primary key
|
||
|
|
# user_id :integer
|
||
|
|
# created_at :datetime
|
||
|
|
# updated_at :datetime
|
||
|
|
# key :text
|
||
|
|
# title :string(255)
|
||
|
|
# type :string(255)
|
||
|
|
# fingerprint :string(255)
|
||
|
|
#
|
||
|
|
|
||
|
|
require 'digest/md5'
|
||
|
|
|
||
|
|
class Key < ActiveRecord::Base
|
||
|
|
include Gitlab::Popen
|
||
|
|
|
||
|
|
belongs_to :user
|
||
|
|
|
||
|
|
before_validation :strip_white_space, :generate_fingerpint
|
||
|
|
|
||
|
|
validates :title, presence: true, length: { within: 0..255 }
|
||
|
|
validates :key, presence: true, length: { within: 0..5000 }, format: { with: /\A(ssh|ecdsa)-.*\Z/ }, uniqueness: true
|
||
|
|
validates :fingerprint, uniqueness: true, presence: { message: 'cannot be generated' }
|
||
|
|
|
||
|
|
delegate :name, :email, to: :user, prefix: true
|
||
|
|
|
||
|
|
after_create :add_to_shell
|
||
|
|
after_create :notify_user
|
||
|
|
after_destroy :remove_from_shell
|
||
|
|
|
||
|
|
def strip_white_space
|
||
|
|
self.key = key.strip unless key.blank?
|
||
|
|
end
|
||
|
|
|
||
|
|
# projects that has this key
|
||
|
|
def projects
|
||
|
|
user.authorized_projects
|
||
|
|
end
|
||
|
|
|
||
|
|
def shell_id
|
||
|
|
"key-#{id}"
|
||
|
|
end
|
||
|
|
|
||
|
|
def add_to_shell
|
||
|
|
GitlabShellWorker.perform_async(
|
||
|
|
:add_key,
|
||
|
|
shell_id,
|
||
|
|
key
|
||
|
|
)
|
||
|
|
end
|
||
|
|
|
||
|
|
def notify_user
|
||
|
|
NotificationService.new.new_key(self)
|
||
|
|
end
|
||
|
|
|
||
|
|
def remove_from_shell
|
||
|
|
GitlabShellWorker.perform_async(
|
||
|
|
:remove_key,
|
||
|
|
shell_id,
|
||
|
|
key,
|
||
|
|
)
|
||
|
|
end
|
||
|
|
|
||
|
|
private
|
||
|
|
|
||
|
|
def generate_fingerpint
|
||
|
|
self.fingerprint = nil
|
||
|
|
return unless key.present?
|
||
|
|
|
||
|
|
cmd_status = 0
|
||
|
|
cmd_output = ''
|
||
|
|
Tempfile.open('gitlab_key_file') do |file|
|
||
|
|
file.puts key
|
||
|
|
file.rewind
|
||
|
|
cmd_output, cmd_status = popen(%W(ssh-keygen -lf #{file.path}), '/tmp')
|
||
|
|
end
|
||
|
|
|
||
|
|
if cmd_status.zero?
|
||
|
|
cmd_output.gsub /([\d\h]{2}:)+[\d\h]{2}/ do |match|
|
||
|
|
self.fingerprint = match
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|
||
|
|
end
|