forgejo-federation/routers/repo/http.go

559 lines
13 KiB
Go
Raw Normal View History

2014-04-16 14:07:07 +05:30
// Copyright 2014 The Gogs Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
2014-04-10 23:50:58 +05:30
package repo
import (
2014-04-11 07:57:13 +05:30
"bytes"
2014-10-16 01:58:38 +05:30
"compress/gzip"
2014-04-10 23:50:58 +05:30
"fmt"
2014-06-28 12:25:33 +05:30
"io"
2014-04-10 23:50:58 +05:30
"io/ioutil"
"net/http"
"os"
"os/exec"
"path"
2014-04-14 20:52:00 +05:30
"path/filepath"
2014-04-10 23:50:58 +05:30
"regexp"
2014-11-18 01:23:41 +05:30
"runtime"
2014-04-10 23:50:58 +05:30
"strconv"
"strings"
"time"
"github.com/gogits/gogs/models"
2014-07-26 09:54:27 +05:30
"github.com/gogits/gogs/modules/base"
2014-06-20 10:44:54 +05:30
"github.com/gogits/gogs/modules/log"
2014-04-10 23:50:58 +05:30
"github.com/gogits/gogs/modules/middleware"
2014-05-26 05:41:25 +05:30
"github.com/gogits/gogs/modules/setting"
2014-04-10 23:50:58 +05:30
)
2014-07-26 09:54:27 +05:30
func authRequired(ctx *middleware.Context) {
ctx.Resp.Header().Set("WWW-Authenticate", "Basic realm=\".\"")
ctx.Data["ErrorMsg"] = "no basic auth and digit auth"
ctx.HTML(401, base.TplName("status/401"))
}
func Http(ctx *middleware.Context) {
username := ctx.Params(":username")
reponame := ctx.Params(":reponame")
2014-04-10 23:50:58 +05:30
if strings.HasSuffix(reponame, ".git") {
reponame = reponame[:len(reponame)-4]
}
var isPull bool
service := ctx.Query("service")
if service == "git-receive-pack" ||
strings.HasSuffix(ctx.Req.URL.Path, "git-receive-pack") {
isPull = false
} else if service == "git-upload-pack" ||
strings.HasSuffix(ctx.Req.URL.Path, "git-upload-pack") {
isPull = true
} else {
isPull = (ctx.Req.Method == "GET")
}
repoUser, err := models.GetUserByName(username)
if err != nil {
2014-05-31 03:27:38 +05:30
if err == models.ErrUserNotExist {
2014-08-02 23:17:33 +05:30
ctx.Handle(404, "GetUserByName", nil)
2014-05-31 03:27:38 +05:30
} else {
2014-08-02 23:17:33 +05:30
ctx.Handle(500, "GetUserByName", err)
2014-05-31 03:27:38 +05:30
}
2014-04-10 23:50:58 +05:30
return
}
repo, err := models.GetRepositoryByName(repoUser.Id, reponame)
if err != nil {
if models.IsErrRepoNotExist(err) {
2014-08-02 23:17:33 +05:30
ctx.Handle(404, "GetRepositoryByName", nil)
2014-05-31 03:27:38 +05:30
} else {
2014-08-02 23:17:33 +05:30
ctx.Handle(500, "GetRepositoryByName", err)
2014-05-31 03:27:38 +05:30
}
2014-04-10 23:50:58 +05:30
return
}
// Only public pull don't need auth.
2014-04-16 14:15:02 +05:30
isPublicPull := !repo.IsPrivate && isPull
var (
askAuth = !isPublicPull || setting.Service.RequireSignInView
authUser *models.User
authUsername string
authPasswd string
)
2014-04-11 07:57:13 +05:30
2014-04-10 23:50:58 +05:30
// check access
if askAuth {
baHead := ctx.Req.Header.Get("Authorization")
if baHead == "" {
authRequired(ctx)
return
}
auths := strings.Fields(baHead)
// currently check basic auth
// TODO: support digit auth
// FIXME: middlewares/context.go did basic auth check already,
// maybe could use that one.
2014-04-10 23:50:58 +05:30
if len(auths) != 2 || auths[0] != "Basic" {
ctx.HandleText(401, "no basic auth and digit auth")
2014-04-10 23:50:58 +05:30
return
}
authUsername, authPasswd, err = base.BasicAuthDecode(auths[1])
2014-04-10 23:50:58 +05:30
if err != nil {
ctx.HandleText(401, "no basic auth and digit auth")
2014-04-10 23:50:58 +05:30
return
}
authUser, err = models.UserSignIn(authUsername, authPasswd)
2014-04-10 23:50:58 +05:30
if err != nil {
if err != models.ErrUserNotExist {
2015-02-27 18:12:03 +05:30
ctx.Handle(500, "UserSignIn error: %v", err)
2015-01-08 19:46:38 +05:30
return
}
// Assume username now is a token.
token, err := models.GetAccessTokenBySha(authUsername)
if err != nil {
if err == models.ErrAccessTokenNotExist {
ctx.HandleText(401, "invalid token")
} else {
ctx.Handle(500, "GetAccessTokenBySha", err)
2015-01-08 19:46:38 +05:30
}
return
2015-01-08 19:46:38 +05:30
}
authUser, err = models.GetUserById(token.Uid)
if err != nil {
ctx.Handle(500, "GetUserById", err)
2015-01-08 19:46:38 +05:30
return
}
authUsername = authUser.Name
2014-04-10 23:50:58 +05:30
}
2014-04-16 14:15:02 +05:30
if !isPublicPull {
var tp = models.ACCESS_MODE_WRITE
2014-04-16 14:15:02 +05:30
if isPull {
tp = models.ACCESS_MODE_READ
2014-04-16 14:15:02 +05:30
}
2014-04-10 23:50:58 +05:30
has, err := models.HasAccess(authUser, repo, tp)
2014-04-16 14:15:02 +05:30
if err != nil {
ctx.HandleText(401, "no basic auth and digit auth")
2014-04-16 14:15:02 +05:30
return
} else if !has {
if tp == models.ACCESS_MODE_READ {
has, err = models.HasAccess(authUser, repo, models.ACCESS_MODE_WRITE)
2014-04-16 14:15:02 +05:30
if err != nil || !has {
ctx.HandleText(401, "no basic auth and digit auth")
2014-04-16 14:15:02 +05:30
return
}
} else {
ctx.HandleText(401, "no basic auth and digit auth")
2014-04-10 23:50:58 +05:30
return
}
}
if !isPull && repo.IsMirror {
ctx.HandleText(401, "can't push to mirror")
return
}
2014-04-10 23:50:58 +05:30
}
}
callback := func(rpc string, input []byte) {
2014-04-11 07:57:13 +05:30
if rpc == "receive-pack" {
2014-06-28 12:25:33 +05:30
var lastLine int64 = 0
for {
head := input[lastLine : lastLine+2]
if head[0] == '0' && head[1] == '0' {
size, err := strconv.ParseInt(string(input[lastLine+2:lastLine+4]), 16, 32)
if err != nil {
2014-07-26 09:54:27 +05:30
log.Error(4, "%v", err)
2014-06-28 12:25:33 +05:30
return
}
if size == 0 {
//fmt.Println(string(input[lastLine:]))
break
}
line := input[lastLine : lastLine+size]
idx := bytes.IndexRune(line, '\000')
if idx > -1 {
line = line[:idx]
}
fields := strings.Fields(string(line))
if len(fields) >= 3 {
oldCommitId := fields[0][4:]
newCommitId := fields[1]
refName := fields[2]
// FIXME: handle error.
2015-07-25 19:02:04 +05:30
if err = models.Update(refName, oldCommitId, newCommitId, authUsername, username, reponame, authUser.Id); err == nil {
models.HookQueue.AddRepoID(repo.Id)
}
2014-06-28 12:25:33 +05:30
}
lastLine = lastLine + size
} else {
break
2014-04-11 07:57:13 +05:30
}
}
}
2014-06-28 12:25:33 +05:30
}
HTTPBackend(&Config{
RepoRootPath: setting.RepoRootPath,
GitBinPath: "git",
UploadPack: true,
ReceivePack: true,
OnSucceed: callback,
})(ctx.Resp, ctx.Req.Request)
2014-04-10 23:50:58 +05:30
2014-11-18 01:23:41 +05:30
runtime.GC()
2014-04-10 23:50:58 +05:30
}
type Config struct {
RepoRootPath string
GitBinPath string
UploadPack bool
ReceivePack bool
OnSucceed func(rpc string, input []byte)
2014-04-10 23:50:58 +05:30
}
type handler struct {
*Config
w http.ResponseWriter
r *http.Request
Dir string
File string
}
type route struct {
cr *regexp.Regexp
method string
handler func(handler)
}
2014-04-10 23:50:58 +05:30
var routes = []route{
{regexp.MustCompile("(.*?)/git-upload-pack$"), "POST", serviceUploadPack},
{regexp.MustCompile("(.*?)/git-receive-pack$"), "POST", serviceReceivePack},
{regexp.MustCompile("(.*?)/info/refs$"), "GET", getInfoRefs},
{regexp.MustCompile("(.*?)/HEAD$"), "GET", getTextFile},
{regexp.MustCompile("(.*?)/objects/info/alternates$"), "GET", getTextFile},
{regexp.MustCompile("(.*?)/objects/info/http-alternates$"), "GET", getTextFile},
{regexp.MustCompile("(.*?)/objects/info/packs$"), "GET", getInfoPacks},
{regexp.MustCompile("(.*?)/objects/info/[^/]*$"), "GET", getTextFile},
{regexp.MustCompile("(.*?)/objects/[0-9a-f]{2}/[0-9a-f]{38}$"), "GET", getLooseObject},
{regexp.MustCompile("(.*?)/objects/pack/pack-[0-9a-f]{40}\\.pack$"), "GET", getPackFile},
{regexp.MustCompile("(.*?)/objects/pack/pack-[0-9a-f]{40}\\.idx$"), "GET", getIdxFile},
}
// Request handling function
func HTTPBackend(config *Config) http.HandlerFunc {
2014-04-10 23:50:58 +05:30
return func(w http.ResponseWriter, r *http.Request) {
for _, route := range routes {
r.URL.Path = strings.ToLower(r.URL.Path) // blue: In case some repo name has upper case name
2014-04-10 23:50:58 +05:30
if m := route.cr.FindStringSubmatch(r.URL.Path); m != nil {
if route.method != r.Method {
renderMethodNotAllowed(w, r)
return
}
file := strings.Replace(r.URL.Path, m[1]+"/", "", 1)
dir, err := getGitDir(config, m[1])
if err != nil {
2014-07-26 09:54:27 +05:30
log.GitLogger.Error(4, err.Error())
2014-04-10 23:50:58 +05:30
renderNotFound(w)
return
}
hr := handler{config, w, r, dir, file}
route.handler(hr)
return
}
}
2014-06-28 08:36:07 +05:30
2014-04-10 23:50:58 +05:30
renderNotFound(w)
return
}
}
// Actual command handling functions
func serviceUploadPack(hr handler) {
serviceRpc("upload-pack", hr)
}
func serviceReceivePack(hr handler) {
serviceRpc("receive-pack", hr)
}
func serviceRpc(rpc string, hr handler) {
w, r, dir := hr.w, hr.r, hr.Dir
if !hasAccess(r, hr.Config, dir, rpc, true) {
2014-04-10 23:50:58 +05:30
renderNoAccess(w)
return
}
w.Header().Set("Content-Type", fmt.Sprintf("application/x-git-%s-result", rpc))
2014-10-16 01:58:38 +05:30
var (
reqBody = r.Body
input []byte
br io.Reader
err error
)
// Handle GZIP.
if r.Header.Get("Content-Encoding") == "gzip" {
reqBody, err = gzip.NewReader(reqBody)
if err != nil {
log.GitLogger.Error(2, "fail to create gzip reader: %v", err)
w.WriteHeader(http.StatusInternalServerError)
return
}
}
2014-06-28 12:25:33 +05:30
if hr.Config.OnSucceed != nil {
2014-10-16 01:58:38 +05:30
input, err = ioutil.ReadAll(reqBody)
if err != nil {
log.GitLogger.Error(2, "fail to read request body: %v", err)
w.WriteHeader(http.StatusInternalServerError)
return
}
2014-06-28 12:25:33 +05:30
br = bytes.NewReader(input)
} else {
2014-10-16 01:58:38 +05:30
br = reqBody
2014-06-28 12:25:33 +05:30
}
2014-06-28 08:36:07 +05:30
2014-04-10 23:50:58 +05:30
args := []string{rpc, "--stateless-rpc", dir}
cmd := exec.Command(hr.Config.GitBinPath, args...)
cmd.Dir = dir
2014-06-28 08:36:07 +05:30
cmd.Stdout = w
cmd.Stdin = br
2014-04-10 23:50:58 +05:30
2014-10-16 01:58:38 +05:30
if err := cmd.Run(); err != nil {
log.GitLogger.Error(2, "fail to serve RPC(%s): %v", rpc, err)
w.WriteHeader(http.StatusInternalServerError)
2014-04-10 23:50:58 +05:30
return
}
if hr.Config.OnSucceed != nil {
hr.Config.OnSucceed(rpc, input)
}
}
func getInfoRefs(hr handler) {
w, r, dir := hr.w, hr.r, hr.Dir
serviceName := getServiceType(r)
access := hasAccess(r, hr.Config, dir, serviceName, false)
if access {
args := []string{serviceName, "--stateless-rpc", "--advertise-refs", "."}
refs := gitCommand(hr.Config.GitBinPath, dir, args...)
hdrNocache(w)
w.Header().Set("Content-Type", fmt.Sprintf("application/x-git-%s-advertisement", serviceName))
w.WriteHeader(http.StatusOK)
w.Write(packetWrite("# service=git-" + serviceName + "\n"))
w.Write(packetFlush())
w.Write(refs)
} else {
updateServerInfo(hr.Config.GitBinPath, dir)
hdrNocache(w)
sendFile("text/plain; charset=utf-8", hr)
}
}
func getInfoPacks(hr handler) {
hdrCacheForever(hr.w)
sendFile("text/plain; charset=utf-8", hr)
}
func getLooseObject(hr handler) {
hdrCacheForever(hr.w)
sendFile("application/x-git-loose-object", hr)
}
func getPackFile(hr handler) {
hdrCacheForever(hr.w)
sendFile("application/x-git-packed-objects", hr)
}
func getIdxFile(hr handler) {
hdrCacheForever(hr.w)
sendFile("application/x-git-packed-objects-toc", hr)
}
func getTextFile(hr handler) {
hdrNocache(hr.w)
sendFile("text/plain", hr)
}
// Logic helping functions
func sendFile(contentType string, hr handler) {
w, r := hr.w, hr.r
reqFile := path.Join(hr.Dir, hr.File)
2014-10-16 01:58:38 +05:30
// fmt.Println("sendFile:", reqFile)
2014-04-10 23:50:58 +05:30
f, err := os.Stat(reqFile)
if os.IsNotExist(err) {
renderNotFound(w)
return
}
w.Header().Set("Content-Type", contentType)
w.Header().Set("Content-Length", fmt.Sprintf("%d", f.Size()))
w.Header().Set("Last-Modified", f.ModTime().Format(http.TimeFormat))
http.ServeFile(w, r, reqFile)
}
2014-04-14 20:52:00 +05:30
func getGitDir(config *Config, fPath string) (string, error) {
root := config.RepoRootPath
2014-04-10 23:50:58 +05:30
if root == "" {
cwd, err := os.Getwd()
if err != nil {
2014-07-26 09:54:27 +05:30
log.GitLogger.Error(4, err.Error())
2014-04-10 23:50:58 +05:30
return "", err
}
root = cwd
}
2014-04-14 20:52:00 +05:30
if !strings.HasSuffix(fPath, ".git") {
fPath = fPath + ".git"
}
f := filepath.Join(root, fPath)
2014-04-10 23:50:58 +05:30
if _, err := os.Stat(f); os.IsNotExist(err) {
return "", err
}
return f, nil
}
func getServiceType(r *http.Request) string {
serviceType := r.FormValue("service")
if s := strings.HasPrefix(serviceType, "git-"); !s {
return ""
}
return strings.Replace(serviceType, "git-", "", 1)
}
func hasAccess(r *http.Request, config *Config, dir string, rpc string, checkContentType bool) bool {
if checkContentType {
if r.Header.Get("Content-Type") != fmt.Sprintf("application/x-git-%s-request", rpc) {
return false
}
}
if !(rpc == "upload-pack" || rpc == "receive-pack") {
return false
}
if rpc == "receive-pack" {
return config.ReceivePack
}
if rpc == "upload-pack" {
return config.UploadPack
}
return getConfigSetting(config.GitBinPath, rpc, dir)
}
func getConfigSetting(gitBinPath, serviceName string, dir string) bool {
serviceName = strings.Replace(serviceName, "-", "", -1)
setting := getGitConfig(gitBinPath, "http."+serviceName, dir)
if serviceName == "uploadpack" {
return setting != "false"
}
return setting == "true"
}
func getGitConfig(gitBinPath, configName string, dir string) string {
args := []string{"config", configName}
out := string(gitCommand(gitBinPath, dir, args...))
return out[0 : len(out)-1]
}
func updateServerInfo(gitBinPath, dir string) []byte {
args := []string{"update-server-info"}
return gitCommand(gitBinPath, dir, args...)
}
func gitCommand(gitBinPath, dir string, args ...string) []byte {
command := exec.Command(gitBinPath, args...)
command.Dir = dir
out, err := command.Output()
if err != nil {
2014-07-26 09:54:27 +05:30
log.GitLogger.Error(4, err.Error())
2014-04-10 23:50:58 +05:30
}
return out
}
// HTTP error response handling functions
func renderMethodNotAllowed(w http.ResponseWriter, r *http.Request) {
if r.Proto == "HTTP/1.1" {
w.WriteHeader(http.StatusMethodNotAllowed)
w.Write([]byte("Method Not Allowed"))
} else {
w.WriteHeader(http.StatusBadRequest)
w.Write([]byte("Bad Request"))
}
}
func renderNotFound(w http.ResponseWriter) {
w.WriteHeader(http.StatusNotFound)
w.Write([]byte("Not Found"))
}
func renderNoAccess(w http.ResponseWriter) {
w.WriteHeader(http.StatusForbidden)
w.Write([]byte("Forbidden"))
}
// Packet-line handling function
func packetFlush() []byte {
return []byte("0000")
}
func packetWrite(str string) []byte {
s := strconv.FormatInt(int64(len(str)+4), 16)
if len(s)%4 != 0 {
s = strings.Repeat("0", 4-len(s)%4) + s
}
return []byte(s + str)
}
// Header writing functions
func hdrNocache(w http.ResponseWriter) {
w.Header().Set("Expires", "Fri, 01 Jan 1980 00:00:00 GMT")
w.Header().Set("Pragma", "no-cache")
w.Header().Set("Cache-Control", "no-cache, max-age=0, must-revalidate")
}
func hdrCacheForever(w http.ResponseWriter) {
now := time.Now().Unix()
expires := now + 31536000
w.Header().Set("Date", fmt.Sprintf("%d", now))
w.Header().Set("Expires", fmt.Sprintf("%d", expires))
w.Header().Set("Cache-Control", "public, max-age=31536000")
}