forgejo-federation/modules/auth/auth.go

287 lines
7.1 KiB
Go
Raw Normal View History

2014-03-06 12:51:44 +05:30
// Copyright 2014 The Gogs Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
package auth
import (
"reflect"
2014-07-26 09:54:27 +05:30
"strings"
2014-03-06 12:51:44 +05:30
"github.com/Unknwon/com"
2015-10-16 06:58:12 +05:30
"github.com/go-macaron/binding"
"github.com/go-macaron/session"
gouuid "github.com/satori/go.uuid"
2015-10-16 06:58:12 +05:30
"gopkg.in/macaron.v1"
2014-03-06 12:51:44 +05:30
"code.gitea.io/gitea/models"
"code.gitea.io/gitea/modules/base"
"code.gitea.io/gitea/modules/log"
"code.gitea.io/gitea/modules/setting"
"code.gitea.io/gitea/modules/util"
"code.gitea.io/gitea/modules/validation"
2014-03-06 12:51:44 +05:30
)
2016-11-27 11:33:59 +05:30
// IsAPIPath if URL is an api path
func IsAPIPath(url string) bool {
return strings.HasPrefix(url, "/api/")
}
// SignedInID returns the id of signed in user.
func SignedInID(ctx *macaron.Context, sess session.Store) int64 {
2014-07-26 09:54:27 +05:30
if !models.HasEngine {
return 0
}
// Check access token.
if IsAPIPath(ctx.Req.URL.Path) {
tokenSHA := ctx.Query("token")
if len(tokenSHA) == 0 {
2016-10-07 22:47:27 +05:30
tokenSHA = ctx.Query("access_token")
}
if len(tokenSHA) == 0 {
// Well, check with header again.
auHead := ctx.Req.Header.Get("Authorization")
if len(auHead) > 0 {
auths := strings.Fields(auHead)
if len(auths) == 2 && auths[0] == "token" {
tokenSHA = auths[1]
}
}
}
// Let's see if token is valid.
if len(tokenSHA) > 0 {
t, err := models.GetAccessTokenBySHA(tokenSHA)
if err != nil {
2016-06-27 14:32:39 +05:30
if models.IsErrAccessTokenNotExist(err) || models.IsErrAccessTokenEmpty(err) {
log.Error(4, "GetAccessTokenBySHA: %v", err)
}
return 0
2014-11-12 17:18:50 +05:30
}
t.UpdatedUnix = util.TimeStampNow()
2016-01-07 01:11:42 +05:30
if err = models.UpdateAccessToken(t); err != nil {
log.Error(4, "UpdateAccessToken: %v", err)
}
ctx.Data["IsApiToken"] = true
return t.UID
2014-11-12 17:18:50 +05:30
}
}
uid := sess.Get("uid")
if uid == nil {
return 0
} else if id, ok := uid.(int64); ok {
return id
}
2014-07-26 09:54:27 +05:30
return 0
2014-07-03 02:12:16 +05:30
}
2014-07-26 09:54:27 +05:30
// SignedInUser returns the user object of signed user.
2014-12-06 04:24:57 +05:30
// It returns a bool value to indicate whether user uses basic auth or not.
func SignedInUser(ctx *macaron.Context, sess session.Store) (*models.User, bool) {
2014-11-10 16:00:07 +05:30
if !models.HasEngine {
2014-11-18 21:37:16 +05:30
return nil, false
2014-11-10 16:00:07 +05:30
}
if uid := SignedInID(ctx, sess); uid > 0 {
user, err := models.GetUserByID(uid)
if err == nil {
return user, false
} else if !models.IsErrUserNotExist(err) {
log.Error(4, "GetUserById: %v", err)
}
}
2014-11-10 16:00:07 +05:30
if setting.Service.EnableReverseProxyAuth {
webAuthUser := ctx.Req.Header.Get(setting.ReverseProxyAuthUser)
if len(webAuthUser) > 0 {
u, err := models.GetUserByName(webAuthUser)
if err != nil {
if !models.IsErrUserNotExist(err) {
log.Error(4, "GetUserByName: %v", err)
return nil, false
}
2014-12-06 04:24:57 +05:30
// Check if enabled auto-registration.
if setting.Service.EnableReverseProxyAutoRegister {
email := gouuid.NewV4().String() + "@localhost"
if setting.Service.EnableReverseProxyEmail {
webAuthEmail := ctx.Req.Header.Get(setting.ReverseProxyAuthEmail)
if len(webAuthEmail) > 0 {
email = webAuthEmail
}
}
u := &models.User{
Name: webAuthUser,
Email: email,
Passwd: webAuthUser,
IsActive: true,
}
if err = models.CreateUser(u); err != nil {
// FIXME: should I create a system notice?
log.Error(4, "CreateUser: %v", err)
return nil, false
2014-11-10 16:00:07 +05:30
}
return u, false
2014-11-10 16:00:07 +05:30
}
}
return u, false
2014-11-10 16:00:07 +05:30
}
}
2014-11-10 16:00:07 +05:30
// Check with basic auth.
baHead := ctx.Req.Header.Get("Authorization")
if len(baHead) > 0 {
auths := strings.Fields(baHead)
if len(auths) == 2 && auths[0] == "Basic" {
uname, passwd, _ := base.BasicAuthDecode(auths[1])
2014-11-10 16:00:07 +05:30
u, err := models.UserSignIn(uname, passwd)
if err != nil {
if !models.IsErrUserNotExist(err) {
log.Error(4, "UserSignIn: %v", err)
}
return nil, false
2014-11-10 16:00:07 +05:30
}
ctx.Data["IsApiToken"] = true
return u, true
}
2014-07-26 09:54:27 +05:30
}
return nil, false
2014-03-29 04:10:31 +05:30
}
2016-11-27 11:33:59 +05:30
// Form form binding interface
2014-10-15 20:49:20 +05:30
type Form interface {
binding.Validator
}
func init() {
binding.SetNameMapper(com.ToSnakeCase)
}
2014-07-26 09:54:27 +05:30
// AssignForm assign form values back to the template data.
func AssignForm(form interface{}, data map[string]interface{}) {
typ := reflect.TypeOf(form)
val := reflect.ValueOf(form)
if typ.Kind() == reflect.Ptr {
typ = typ.Elem()
val = val.Elem()
}
for i := 0; i < typ.NumField(); i++ {
field := typ.Field(i)
fieldName := field.Tag.Get("form")
// Allow ignored fields in the struct
if fieldName == "-" {
continue
} else if len(fieldName) == 0 {
fieldName = com.ToSnakeCase(field.Name)
2014-07-26 09:54:27 +05:30
}
data[fieldName] = val.Field(i).Interface()
}
}
func getRuleBody(field reflect.StructField, prefix string) string {
2014-07-26 09:54:27 +05:30
for _, rule := range strings.Split(field.Tag.Get("binding"), ";") {
2014-08-01 15:42:14 +05:30
if strings.HasPrefix(rule, prefix) {
2017-03-03 13:51:31 +05:30
return rule[len(prefix) : len(rule)-1]
2014-07-26 09:54:27 +05:30
}
}
return ""
}
2016-11-27 11:33:59 +05:30
// GetSize get size int form tag
func GetSize(field reflect.StructField) string {
return getRuleBody(field, "Size(")
}
2016-11-27 11:33:59 +05:30
// GetMinSize get minimal size in form tag
2014-08-01 15:42:14 +05:30
func GetMinSize(field reflect.StructField) string {
return getRuleBody(field, "MinSize(")
2014-08-01 15:42:14 +05:30
}
2016-11-27 11:33:59 +05:30
// GetMaxSize get max size in form tag
2014-08-01 15:42:14 +05:30
func GetMaxSize(field reflect.StructField) string {
return getRuleBody(field, "MaxSize(")
}
2016-11-27 11:33:59 +05:30
// GetInclude get include in form tag
func GetInclude(field reflect.StructField) string {
return getRuleBody(field, "Include(")
2014-08-01 15:42:14 +05:30
}
2015-08-28 16:03:09 +05:30
// FIXME: struct contains a struct
func validateStruct(obj interface{}) binding.Errors {
return nil
}
2014-10-15 20:49:20 +05:30
func validate(errs binding.Errors, data map[string]interface{}, f Form, l macaron.Locale) binding.Errors {
if errs.Len() == 0 {
return errs
2014-07-26 09:54:27 +05:30
}
data["HasError"] = true
AssignForm(f, data)
typ := reflect.TypeOf(f)
val := reflect.ValueOf(f)
if typ.Kind() == reflect.Ptr {
typ = typ.Elem()
val = val.Elem()
}
for i := 0; i < typ.NumField(); i++ {
field := typ.Field(i)
fieldName := field.Tag.Get("form")
// Allow ignored fields in the struct
if fieldName == "-" {
continue
}
2014-10-15 20:49:20 +05:30
if errs[0].FieldNames[0] == field.Name {
2017-03-03 13:51:31 +05:30
data["Err_"+field.Name] = true
2015-07-08 17:17:56 +05:30
trName := field.Tag.Get("locale")
if len(trName) == 0 {
trName = l.Tr("form." + field.Name)
} else {
trName = l.Tr(trName)
}
2014-10-15 20:49:20 +05:30
switch errs[0].Classification {
2014-12-15 12:19:59 +05:30
case binding.ERR_REQUIRED:
2014-07-26 09:54:27 +05:30
data["ErrorMsg"] = trName + l.Tr("form.require_error")
2014-12-15 12:19:59 +05:30
case binding.ERR_ALPHA_DASH:
2014-07-26 09:54:27 +05:30
data["ErrorMsg"] = trName + l.Tr("form.alpha_dash_error")
2014-12-15 12:19:59 +05:30
case binding.ERR_ALPHA_DASH_DOT:
2014-07-26 09:54:27 +05:30
data["ErrorMsg"] = trName + l.Tr("form.alpha_dash_dot_error")
case validation.ErrGitRefName:
data["ErrorMsg"] = trName + l.Tr("form.git_ref_name_error")
case binding.ERR_SIZE:
data["ErrorMsg"] = trName + l.Tr("form.size_error", GetSize(field))
2014-12-15 12:19:59 +05:30
case binding.ERR_MIN_SIZE:
2014-08-01 15:42:14 +05:30
data["ErrorMsg"] = trName + l.Tr("form.min_size_error", GetMinSize(field))
2014-12-15 12:19:59 +05:30
case binding.ERR_MAX_SIZE:
2014-08-01 15:42:14 +05:30
data["ErrorMsg"] = trName + l.Tr("form.max_size_error", GetMaxSize(field))
2014-12-15 12:19:59 +05:30
case binding.ERR_EMAIL:
2014-07-26 09:54:27 +05:30
data["ErrorMsg"] = trName + l.Tr("form.email_error")
2014-12-15 12:19:59 +05:30
case binding.ERR_URL:
2014-07-26 09:54:27 +05:30
data["ErrorMsg"] = trName + l.Tr("form.url_error")
case binding.ERR_INCLUDE:
data["ErrorMsg"] = trName + l.Tr("form.include_error", GetInclude(field))
2014-07-26 09:54:27 +05:30
default:
2014-10-15 20:49:20 +05:30
data["ErrorMsg"] = l.Tr("form.unknown_error") + " " + errs[0].Classification
2014-07-26 09:54:27 +05:30
}
2014-10-15 20:49:20 +05:30
return errs
2014-07-26 09:54:27 +05:30
}
}
2014-10-15 20:49:20 +05:30
return errs
2014-03-29 04:10:31 +05:30
}