86 lines
1.7 KiB
Ruby
86 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class GpgSignature < ApplicationRecord
|
|
include ShaAttribute
|
|
|
|
sha_attribute :commit_sha
|
|
sha_attribute :gpg_key_primary_keyid
|
|
|
|
enum verification_status: {
|
|
unverified: 0,
|
|
verified: 1,
|
|
same_user_different_email: 2,
|
|
other_user: 3,
|
|
unverified_key: 4,
|
|
unknown_key: 5,
|
|
multiple_signatures: 6
|
|
}
|
|
|
|
belongs_to :project
|
|
belongs_to :gpg_key
|
|
belongs_to :gpg_key_subkey
|
|
|
|
validates :commit_sha, presence: true
|
|
validates :project_id, presence: true
|
|
validates :gpg_key_primary_keyid, presence: true
|
|
|
|
scope :by_commit_sha, ->(shas) { where(commit_sha: shas) }
|
|
|
|
def self.with_key_and_subkeys(gpg_key)
|
|
subkey_ids = gpg_key.subkeys.pluck(:id)
|
|
|
|
where(
|
|
arel_table[:gpg_key_id].eq(gpg_key.id).or(
|
|
arel_table[:gpg_key_subkey_id].in(subkey_ids)
|
|
)
|
|
)
|
|
end
|
|
|
|
def self.safe_create!(attributes)
|
|
create_with(attributes)
|
|
.safe_find_or_create_by!(commit_sha: attributes[:commit_sha])
|
|
end
|
|
|
|
# Find commits that are lacking a signature in the database at present
|
|
def self.unsigned_commit_shas(commit_shas)
|
|
return [] if commit_shas.empty?
|
|
|
|
signed = GpgSignature.where(commit_sha: commit_shas).pluck(:commit_sha)
|
|
|
|
commit_shas - signed
|
|
end
|
|
|
|
def gpg_key=(model)
|
|
case model
|
|
when GpgKey
|
|
super
|
|
when GpgKeySubkey
|
|
self.gpg_key_subkey = model
|
|
when NilClass
|
|
super
|
|
self.gpg_key_subkey = nil
|
|
end
|
|
end
|
|
|
|
def gpg_key
|
|
if gpg_key_id
|
|
super
|
|
elsif gpg_key_subkey_id
|
|
gpg_key_subkey
|
|
end
|
|
end
|
|
|
|
def gpg_key_primary_keyid
|
|
super&.upcase
|
|
end
|
|
|
|
def commit
|
|
project.commit(commit_sha)
|
|
end
|
|
|
|
def gpg_commit
|
|
return unless commit
|
|
|
|
Gitlab::Gpg::Commit.new(commit)
|
|
end
|
|
end
|