2017-04-19 09:15:01 +05:30
// Copyright 2017 The Gitea Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
// Package private includes all internal routes. The package name internal is ideal but Golang is not allowed, so we use private as package name instead.
package private
import (
2021-01-26 21:06:53 +05:30
"net/http"
"reflect"
2017-04-19 09:15:01 +05:30
"strings"
2021-01-26 21:06:53 +05:30
"code.gitea.io/gitea/modules/context"
2019-12-24 05:41:12 +05:30
"code.gitea.io/gitea/modules/log"
2019-12-26 16:59:45 +05:30
"code.gitea.io/gitea/modules/private"
2017-04-19 09:15:01 +05:30
"code.gitea.io/gitea/modules/setting"
2021-01-26 21:06:53 +05:30
"code.gitea.io/gitea/modules/web"
2017-05-04 11:12:02 +05:30
2021-01-26 21:06:53 +05:30
"gitea.com/go-chi/binding"
2017-04-19 09:15:01 +05:30
)
// CheckInternalToken check internal token is set
2021-01-26 21:06:53 +05:30
func CheckInternalToken ( next http . Handler ) http . Handler {
return http . HandlerFunc ( func ( w http . ResponseWriter , req * http . Request ) {
tokens := req . Header . Get ( "Authorization" )
2021-05-15 21:02:09 +05:30
fields := strings . SplitN ( tokens , " " , 2 )
2021-01-26 21:06:53 +05:30
if len ( fields ) != 2 || fields [ 0 ] != "Bearer" || fields [ 1 ] != setting . InternalToken {
log . Debug ( "Forbidden attempt to access internal url: Authorization header: %s" , tokens )
http . Error ( w , http . StatusText ( http . StatusForbidden ) , http . StatusForbidden )
} else {
next . ServeHTTP ( w , req )
}
} )
}
// bind binding an obj to a handler
func bind ( obj interface { } ) http . HandlerFunc {
var tp = reflect . TypeOf ( obj )
for tp . Kind ( ) == reflect . Ptr {
tp = tp . Elem ( )
2017-04-19 09:15:01 +05:30
}
2021-01-26 21:06:53 +05:30
return web . Wrap ( func ( ctx * context . PrivateContext ) {
var theObj = reflect . New ( tp ) . Interface ( ) // create a new form obj for every request but not use obj directly
binding . Bind ( ctx . Req , theObj )
web . SetForm ( ctx , theObj )
} )
2017-04-19 09:15:01 +05:30
}
2021-01-26 21:06:53 +05:30
// Routes registers all internal APIs routes to web application.
2017-04-19 09:15:01 +05:30
// These APIs will be invoked by internal commands for example `gitea serv` and etc.
2021-01-26 21:06:53 +05:30
func Routes ( ) * web . Route {
var r = web . NewRoute ( )
r . Use ( context . PrivateContexter ( ) )
r . Use ( CheckInternalToken )
r . Post ( "/ssh/authorized_keys" , AuthorizedPublicKeyByContent )
r . Post ( "/ssh/{id}/update/{repoid}" , UpdatePublicKeyInRepo )
2021-05-22 03:07:16 +05:30
r . Post ( "/ssh/log" , bind ( private . SSHLogOption { } ) , SSHLog )
2021-09-16 19:04:54 +05:30
r . Post ( "/hook/pre-receive/{owner}/{repo}" , RepoAssignment , bind ( private . HookOptions { } ) , HookPreReceive )
2022-01-20 04:56:57 +05:30
r . Post ( "/hook/post-receive/{owner}/{repo}" , context . OverrideContext , bind ( private . HookOptions { } ) , HookPostReceive )
r . Post ( "/hook/proc-receive/{owner}/{repo}" , context . OverrideContext , RepoAssignment , bind ( private . HookOptions { } ) , HookProcReceive )
2021-09-16 19:04:54 +05:30
r . Post ( "/hook/set-default-branch/{owner}/{repo}/{branch}" , RepoAssignment , SetDefaultBranch )
2021-01-26 21:06:53 +05:30
r . Get ( "/serv/none/{keyid}" , ServNoCommand )
r . Get ( "/serv/command/{keyid}/{owner}/{repo}" , ServCommand )
r . Post ( "/manager/shutdown" , Shutdown )
r . Post ( "/manager/restart" , Restart )
r . Post ( "/manager/flush-queues" , bind ( private . FlushOptions { } ) , FlushQueues )
r . Post ( "/manager/pause-logging" , PauseLogging )
r . Post ( "/manager/resume-logging" , ResumeLogging )
r . Post ( "/manager/release-and-reopen-logging" , ReleaseReopenLogging )
r . Post ( "/manager/add-logger" , bind ( private . LoggerOptions { } ) , AddLogger )
r . Post ( "/manager/remove-logger/{group}/{name}" , RemoveLogger )
r . Post ( "/mail/send" , SendEmail )
2021-05-10 13:27:45 +05:30
r . Post ( "/restore_repo" , RestoreRepo )
2021-01-26 21:06:53 +05:30
return r
2017-04-19 09:15:01 +05:30
}