78 lines
1.9 KiB
Ruby
78 lines
1.9 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module API
|
|
module Helpers
|
|
module Packages
|
|
module BasicAuthHelpers
|
|
extend ::Gitlab::Utils::Override
|
|
|
|
module Constants
|
|
AUTHENTICATE_REALM_HEADER = 'WWW-Authenticate'
|
|
AUTHENTICATE_REALM_NAME = 'Basic realm="GitLab Packages Registry"'
|
|
end
|
|
|
|
include Constants
|
|
include Gitlab::Utils::StrongMemoize
|
|
|
|
def unauthorized_user_project
|
|
@unauthorized_user_project ||= find_project(params[:id])
|
|
end
|
|
|
|
def unauthorized_user_project!
|
|
unauthorized_user_project || not_found!
|
|
end
|
|
|
|
def unauthorized_user_group
|
|
@unauthorized_user_group ||= find_group(params[:id])
|
|
end
|
|
|
|
def unauthorized_user_group!
|
|
unauthorized_user_group || not_found!
|
|
end
|
|
|
|
def authorized_user_project
|
|
@authorized_user_project ||= authorized_project_find!
|
|
end
|
|
|
|
def authorized_project_find!
|
|
project = unauthorized_user_project
|
|
|
|
unless project && can?(current_user, :read_project, project)
|
|
return unauthorized_or! { not_found! }
|
|
end
|
|
|
|
project
|
|
end
|
|
|
|
def find_authorized_group!
|
|
strong_memoize(:authorized_group) do
|
|
group = find_group(params[:id])
|
|
|
|
unless group && can?(current_user, :read_group, group)
|
|
next unauthorized_or! { not_found! }
|
|
end
|
|
|
|
group
|
|
end
|
|
end
|
|
|
|
def authorize!(action, subject = :global, reason = nil)
|
|
return if can?(current_user, action, subject)
|
|
|
|
unauthorized_or! { forbidden!(reason) }
|
|
end
|
|
|
|
def unauthorized_or!
|
|
current_user ? yield : unauthorized!
|
|
end
|
|
|
|
override :unauthorized!
|
|
def unauthorized!
|
|
header(AUTHENTICATE_REALM_HEADER, AUTHENTICATE_REALM_NAME)
|
|
super
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|