forked from tangled.org/core
Something went wrong. Try again.
4.9 kB · 152 lines
Go
at master
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153package knotserver
import ( "compress/gzip" "fmt" "io" "net/http" "path/filepath" "strings"
securejoin "github.com/cyphar/filepath-securejoin" "github.com/go-chi/chi/v5" "tangled.sh/tangled.sh/core/knotserver/git/service")
func (d *Handle) InfoRefs(w http.ResponseWriter, r *http.Request) { did := chi.URLParam(r, "did") name := chi.URLParam(r, "name") repoName, err := securejoin.SecureJoin(did, name) if err != nil { gitError(w, "repository not found", http.StatusNotFound) d.l.Error("git: failed to secure join repo path", "handler", "InfoRefs", "error", err) return }
repoPath, err := securejoin.SecureJoin(d.c.Repo.ScanPath, repoName) if err != nil { gitError(w, "repository not found", http.StatusNotFound) d.l.Error("git: failed to secure join repo path", "handler", "InfoRefs", "error", err) return }
cmd := service.ServiceCommand{ GitProtocol: r.Header.Get("Git-Protocol"), Dir: repoPath, Stdout: w, }
serviceName := r.URL.Query().Get("service") switch serviceName { case "git-upload-pack": w.Header().Set("Content-Type", "application/x-git-upload-pack-advertisement") w.Header().Set("Connection", "Keep-Alive") w.Header().Set("Cache-Control", "no-cache, max-age=0, must-revalidate") w.WriteHeader(http.StatusOK)
if err := cmd.InfoRefs(); err != nil { gitError(w, err.Error(), http.StatusInternalServerError) d.l.Error("git: process failed", "handler", "InfoRefs", "service", serviceName, "error", err) return } case "git-receive-pack": d.RejectPush(w, r, name) default: gitError(w, fmt.Sprintf("service unsupported: '%s'", serviceName), http.StatusForbidden) }}
func (d *Handle) UploadPack(w http.ResponseWriter, r *http.Request) { did := chi.URLParam(r, "did") name := chi.URLParam(r, "name") repo, err := securejoin.SecureJoin(d.c.Repo.ScanPath, filepath.Join(did, name)) if err != nil { gitError(w, err.Error(), http.StatusInternalServerError) d.l.Error("git: failed to secure join repo path", "handler", "UploadPack", "error", err) return }
const expectedContentType = "application/x-git-upload-pack-request" contentType := r.Header.Get("Content-Type") if contentType != expectedContentType { gitError(w, fmt.Sprintf("Expected Content-Type: '%s', but received '%s'.", expectedContentType, contentType), http.StatusUnsupportedMediaType) }
var bodyReader io.ReadCloser = r.Body if r.Header.Get("Content-Encoding") == "gzip" { gzipReader, err := gzip.NewReader(r.Body) if err != nil { gitError(w, err.Error(), http.StatusInternalServerError) d.l.Error("git: failed to create gzip reader", "handler", "UploadPack", "error", err) return } defer gzipReader.Close() bodyReader = gzipReader }
w.Header().Set("Content-Type", "application/x-git-upload-pack-result") w.Header().Set("Connection", "Keep-Alive") w.Header().Set("Cache-Control", "no-cache, max-age=0, must-revalidate")
d.l.Info("git: executing git-upload-pack", "handler", "UploadPack", "repo", repo)
cmd := service.ServiceCommand{ GitProtocol: r.Header.Get("Git-Protocol"), Dir: repo, Stdout: w, Stdin: bodyReader, }
w.WriteHeader(http.StatusOK)
if err := cmd.UploadPack(); err != nil { d.l.Error("git: failed to execute git-upload-pack", "handler", "UploadPack", "error", err) return }}
func (d *Handle) ReceivePack(w http.ResponseWriter, r *http.Request) { did := chi.URLParam(r, "did") name := chi.URLParam(r, "name") _, err := securejoin.SecureJoin(d.c.Repo.ScanPath, filepath.Join(did, name)) if err != nil { gitError(w, err.Error(), http.StatusForbidden) d.l.Error("git: failed to secure join repo path", "handler", "ReceivePack", "error", err) return }
d.RejectPush(w, r, name)}
func (d *Handle) RejectPush(w http.ResponseWriter, r *http.Request, unqualifiedRepoName string) { // A text/plain response will cause git to print each line of the body // prefixed with "remote: ". w.Header().Set("content-type", "text/plain; charset=UTF-8") w.WriteHeader(http.StatusForbidden)
fmt.Fprintf(w, "Pushes are only supported over SSH.")
// If the appview gave us the repository owner's handle we can attempt to // construct the correct ssh url. ownerHandle := r.Header.Get("x-tangled-repo-owner-handle") ownerHandle = strings.TrimPrefix(ownerHandle, "@") if ownerHandle != "" && !strings.ContainsAny(ownerHandle, ":") { hostname := d.c.Server.Hostname if strings.Contains(hostname, ":") { hostname = strings.Split(hostname, ":")[0] }
if hostname == "knot1.tangled.sh" { hostname = "tangled.sh" }
fmt.Fprintf(w, " Try:\ngit remote set-url --push origin git@%s:%s/%s\n\n... and push again.", hostname, ownerHandle, unqualifiedRepoName) } fmt.Fprintf(w, "\n\n")}
func gitError(w http.ResponseWriter, msg string, status int) { w.Header().Set("content-type", "text/plain; charset=UTF-8") w.WriteHeader(status) fmt.Fprintf(w, "%s\n", msg)}