1
0
mirror of https://github.com/woodpecker-ci/woodpecker.git synced 2024-12-12 08:23:48 +02:00
woodpecker/server/api/repo.go

412 lines
10 KiB
Go
Raw Normal View History

// Copyright 2022 Woodpecker Authors
2018-02-20 00:24:10 +02:00
// Copyright 2018 Drone.IO Inc.
2018-03-21 15:02:17 +02:00
//
2018-02-20 00:24:10 +02:00
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
2018-03-21 15:02:17 +02:00
//
2018-02-20 00:24:10 +02:00
// http://www.apache.org/licenses/LICENSE-2.0
2018-03-21 15:02:17 +02:00
//
2018-02-20 00:24:10 +02:00
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package api
2015-09-30 03:21:17 +02:00
import (
"encoding/base32"
"errors"
2015-09-30 03:21:17 +02:00
"fmt"
"net/http"
2017-07-14 21:58:38 +02:00
"strconv"
"time"
2015-09-30 03:21:17 +02:00
"github.com/gin-gonic/gin"
"github.com/gorilla/securecookie"
"github.com/rs/zerolog/log"
2015-09-30 03:21:17 +02:00
"github.com/woodpecker-ci/woodpecker/server"
"github.com/woodpecker-ci/woodpecker/server/model"
"github.com/woodpecker-ci/woodpecker/server/router/middleware/session"
"github.com/woodpecker-ci/woodpecker/server/store"
"github.com/woodpecker-ci/woodpecker/server/store/types"
"github.com/woodpecker-ci/woodpecker/shared/token"
2015-09-30 03:21:17 +02:00
)
func PostRepo(c *gin.Context) {
forge := server.Config.Services.Forge
_store := store.FromContext(c)
2015-09-30 03:21:17 +02:00
user := session.User(c)
owner := c.Param("owner")
name := c.Param("name")
repo, err := _store.GetRepoName(owner + "/" + name)
enabledOnce := err == nil // if there's no error, the repo was found and enabled once already
if enabledOnce && repo.IsActive {
c.String(http.StatusConflict, "Repository is already active.")
2015-09-30 03:21:17 +02:00
return
} else if err != nil && !errors.Is(err, types.RecordNotExist) {
c.String(http.StatusInternalServerError, err.Error())
return
2015-09-30 03:21:17 +02:00
}
from, err := forge.Repo(c, user, "0", owner, name)
if err != nil {
c.String(http.StatusInternalServerError, "Could not fetch repository from forge.")
return
}
if !from.Perm.Admin {
c.String(http.StatusForbidden, "User has to be a admin of this repository")
}
if enabledOnce {
repo.Update(from)
} else {
repo = from
repo.AllowPull = true
repo.NetrcOnlyTrusted = true
repo.CancelPreviousPipelineEvents = server.Config.Pipeline.DefaultCancelPreviousPipelineEvents
}
2017-07-14 21:58:38 +02:00
repo.IsActive = true
repo.UserID = user.ID
2017-07-14 21:58:38 +02:00
if repo.Visibility == "" {
repo.Visibility = model.VisibilityPublic
if repo.IsSCMPrivate {
2017-07-14 21:58:38 +02:00
repo.Visibility = model.VisibilityPrivate
}
2015-09-30 03:21:17 +02:00
}
2017-07-14 21:58:38 +02:00
if repo.Timeout == 0 {
repo.Timeout = server.Config.Pipeline.DefaultTimeout
} else if repo.Timeout > server.Config.Pipeline.MaxTimeout {
repo.Timeout = server.Config.Pipeline.MaxTimeout
2015-09-30 03:21:17 +02:00
}
2017-07-14 21:58:38 +02:00
if repo.Hash == "" {
repo.Hash = base32.StdEncoding.EncodeToString(
securecookie.GenerateRandomKey(32),
)
2015-09-30 03:21:17 +02:00
}
2017-07-14 21:58:38 +02:00
// creates the jwt token used to verify the repository
t := token.New(token.HookToken, repo.FullName)
sig, err := t.Sign(repo.Hash)
2015-09-30 03:21:17 +02:00
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
2015-09-30 03:21:17 +02:00
return
}
link := fmt.Sprintf(
"%s/hook?access_token=%s",
server.Config.Server.Host,
2015-09-30 03:21:17 +02:00
sig,
)
err = forge.Activate(c, user, repo, link)
2015-09-30 03:21:17 +02:00
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
2015-09-30 03:21:17 +02:00
return
}
if enabledOnce {
err = _store.UpdateRepo(repo)
} else {
err = _store.CreateRepo(repo)
}
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
return
}
repo.Perm = from.Perm
repo.Perm.Synced = time.Now().Unix()
repo.Perm.UserID = user.ID
repo.Perm.RepoID = repo.ID
repo.Perm.Repo = repo
err = _store.PermUpsert(repo.Perm)
2015-09-30 03:21:17 +02:00
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
2015-09-30 03:21:17 +02:00
return
}
c.JSON(http.StatusOK, repo)
2015-09-30 03:21:17 +02:00
}
func PatchRepo(c *gin.Context) {
_store := store.FromContext(c)
2015-09-30 03:21:17 +02:00
repo := session.Repo(c)
user := session.User(c)
in := new(model.RepoPatch)
2015-09-30 03:21:17 +02:00
if err := c.Bind(in); err != nil {
_ = c.AbortWithError(http.StatusBadRequest, err)
2015-09-30 03:21:17 +02:00
return
}
if in.Timeout != nil && *in.Timeout > server.Config.Pipeline.MaxTimeout && !user.Admin {
c.String(http.StatusForbidden, fmt.Sprintf("Timeout is not allowed to be higher than max timeout (%dmin)", server.Config.Pipeline.MaxTimeout))
}
if in.IsTrusted != nil && *in.IsTrusted != repo.IsTrusted && !user.Admin {
log.Trace().Msgf("user '%s' wants to make repo trusted without being an instance admin ", user.Login)
c.String(http.StatusForbidden, "Insufficient privileges")
return
}
2015-09-30 03:21:17 +02:00
if in.AllowPull != nil {
repo.AllowPull = *in.AllowPull
}
if in.IsGated != nil {
repo.IsGated = *in.IsGated
}
if in.IsTrusted != nil {
2015-09-30 03:21:17 +02:00
repo.IsTrusted = *in.IsTrusted
}
if in.Timeout != nil {
2015-09-30 03:21:17 +02:00
repo.Timeout = *in.Timeout
}
if in.Config != nil {
repo.Config = *in.Config
}
if in.CancelPreviousPipelineEvents != nil {
repo.CancelPreviousPipelineEvents = *in.CancelPreviousPipelineEvents
}
if in.NetrcOnlyTrusted != nil {
repo.NetrcOnlyTrusted = *in.NetrcOnlyTrusted
}
2017-05-23 00:44:58 +02:00
if in.Visibility != nil {
switch *in.Visibility {
case string(model.VisibilityInternal), string(model.VisibilityPrivate), string(model.VisibilityPublic):
repo.Visibility = model.RepoVisibility(*in.Visibility)
2017-05-23 00:44:58 +02:00
default:
c.String(http.StatusBadRequest, "Invalid visibility type")
2017-05-23 00:44:58 +02:00
return
}
}
2015-09-30 03:21:17 +02:00
err := _store.UpdateRepo(repo)
2015-09-30 03:21:17 +02:00
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
2015-09-30 03:21:17 +02:00
return
}
c.JSON(http.StatusOK, repo)
2015-09-30 03:21:17 +02:00
}
2016-06-14 23:05:53 +02:00
func ChownRepo(c *gin.Context) {
_store := store.FromContext(c)
2016-06-14 23:05:53 +02:00
repo := session.Repo(c)
user := session.User(c)
repo.UserID = user.ID
err := _store.UpdateRepo(repo)
2016-06-14 23:05:53 +02:00
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
2016-06-14 23:05:53 +02:00
return
}
c.JSON(http.StatusOK, repo)
}
2015-09-30 03:21:17 +02:00
func GetRepo(c *gin.Context) {
c.JSON(http.StatusOK, session.Repo(c))
2015-09-30 03:21:17 +02:00
}
2021-10-13 14:16:26 +02:00
func GetRepoPermissions(c *gin.Context) {
perm := session.Perm(c)
c.JSON(http.StatusOK, perm)
}
func GetRepoBranches(c *gin.Context) {
repo := session.Repo(c)
user := session.User(c)
f := server.Config.Services.Forge
branches, err := f.Branches(c, user, repo, session.Pagination(c))
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
c.JSON(http.StatusOK, branches)
}
func GetRepoPullRequests(c *gin.Context) {
repo := session.Repo(c)
user := session.User(c)
f := server.Config.Services.Forge
prs, err := f.PullRequests(c, user, repo, session.Pagination(c))
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
c.JSON(http.StatusOK, prs)
}
2015-09-30 03:21:17 +02:00
func DeleteRepo(c *gin.Context) {
2017-07-14 21:58:38 +02:00
remove, _ := strconv.ParseBool(c.Query("remove"))
_store := store.FromContext(c)
2015-09-30 03:21:17 +02:00
repo := session.Repo(c)
2015-10-05 03:34:06 +02:00
user := session.User(c)
2015-09-30 03:21:17 +02:00
2017-07-14 21:58:38 +02:00
repo.IsActive = false
repo.UserID = 0
if err := _store.UpdateRepo(repo); err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
2015-10-05 03:34:06 +02:00
return
2015-09-30 03:21:17 +02:00
}
2015-10-05 03:34:06 +02:00
2017-07-14 21:58:38 +02:00
if remove {
if err := _store.DeleteRepo(repo); err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
2017-07-14 21:58:38 +02:00
return
}
}
if err := server.Config.Services.Forge.Deactivate(c, user, repo, server.Config.Server.Host); err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
c.JSON(http.StatusOK, repo)
2015-09-30 03:21:17 +02:00
}
2017-04-12 15:32:44 +02:00
func RepairRepo(c *gin.Context) {
forge := server.Config.Services.Forge
_store := store.FromContext(c)
2017-04-12 15:32:44 +02:00
repo := session.Repo(c)
user := session.User(c)
// creates the jwt token used to verify the repository
2017-04-12 15:32:44 +02:00
t := token.New(token.HookToken, repo.FullName)
sig, err := t.Sign(repo.Hash)
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
2017-04-12 15:32:44 +02:00
return
}
// reconstruct the link
host := server.Config.Server.Host
2017-04-12 15:32:44 +02:00
link := fmt.Sprintf(
"%s/hook?access_token=%s",
host,
sig,
)
from, err := forge.Repo(c, user, repo.ForgeRemoteID, repo.Owner, repo.Name)
if err != nil {
log.Error().Err(err).Msgf("get repo '%s/%s' from forge", repo.Owner, repo.Name)
c.AbortWithStatus(http.StatusInternalServerError)
return
}
if repo.FullName != from.FullName {
// create a redirection
err = _store.CreateRedirection(&model.Redirection{RepoID: repo.ID, FullName: repo.FullName})
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
}
repo.Update(from)
if err := _store.UpdateRepo(repo); err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
repo.Perm.Pull = from.Perm.Pull
repo.Perm.Push = from.Perm.Push
repo.Perm.Admin = from.Perm.Admin
if err := _store.PermUpsert(repo.Perm); err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
if err := forge.Deactivate(c, user, repo, host); err != nil {
log.Trace().Err(err).Msgf("deactivate repo '%s' to repair failed", repo.FullName)
}
if err := forge.Activate(c, user, repo, link); err != nil {
c.String(http.StatusInternalServerError, err.Error())
return
}
2017-04-12 15:32:44 +02:00
c.Writer.WriteHeader(http.StatusOK)
}
func MoveRepo(c *gin.Context) {
forge := server.Config.Services.Forge
_store := store.FromContext(c)
repo := session.Repo(c)
user := session.User(c)
to, exists := c.GetQuery("to")
if !exists {
err := fmt.Errorf("Missing required to query value")
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
owner, name, errParse := model.ParseRepo(to)
if errParse != nil {
_ = c.AbortWithError(http.StatusInternalServerError, errParse)
return
}
from, err := forge.Repo(c, user, "", owner, name)
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
if !from.Perm.Admin {
c.AbortWithStatus(http.StatusUnauthorized)
return
}
err = _store.CreateRedirection(&model.Redirection{RepoID: repo.ID, FullName: repo.FullName})
if err != nil {
_ = c.AbortWithError(http.StatusInternalServerError, err)
return
}
repo.Update(from)
errStore := _store.UpdateRepo(repo)
if errStore != nil {
_ = c.AbortWithError(http.StatusInternalServerError, errStore)
return
}
repo.Perm = from.Perm
errStore = _store.PermUpsert(repo.Perm)
if errStore != nil {
_ = c.AbortWithError(http.StatusInternalServerError, errStore)
return
}
// creates the jwt token used to verify the repository
t := token.New(token.HookToken, repo.FullName)
sig, err := t.Sign(repo.Hash)
if err != nil {
c.String(http.StatusInternalServerError, err.Error())
return
}
// reconstruct the link
host := server.Config.Server.Host
link := fmt.Sprintf(
"%s/hook?access_token=%s",
host,
sig,
)
if err := forge.Deactivate(c, user, repo, host); err != nil {
log.Trace().Err(err).Msgf("deactivate repo '%s' for move to activate later, got an error", repo.FullName)
}
if err := forge.Activate(c, user, repo, link); err != nil {
c.String(http.StatusInternalServerError, err.Error())
return
}
c.Writer.WriteHeader(http.StatusOK)
}