diff options
author | Unknwon <u@gogs.io> | 2019-10-24 01:51:46 -0700 |
---|---|---|
committer | GitHub <noreply@github.com> | 2019-10-24 01:51:46 -0700 |
commit | 01c8df01ec0608f1f25b2f1444adabb98fa5ee8a (patch) | |
tree | f8a7e5dd8d2a8c51e1ce2cabb9d33571a93314dd /cmd/serv.go | |
parent | 613139e7bef81d3573e7988a47eb6765f3de347a (diff) |
internal: move packages under this directory (#5836)
* Rename pkg -> internal
* Rename routes -> route
* Move route -> internal/route
* Rename models -> db
* Move db -> internal/db
* Fix route2 -> route
* Move cmd -> internal/cmd
* Bump version
Diffstat (limited to 'cmd/serv.go')
-rw-r--r-- | cmd/serv.go | 272 |
1 files changed, 0 insertions, 272 deletions
diff --git a/cmd/serv.go b/cmd/serv.go deleted file mode 100644 index c767634e..00000000 --- a/cmd/serv.go +++ /dev/null @@ -1,272 +0,0 @@ -// Copyright 2014 The Gogs Authors. All rights reserved. -// Use of this source code is governed by a MIT-style -// license that can be found in the LICENSE file. - -package cmd - -import ( - "fmt" - "os" - "os/exec" - "path/filepath" - "strings" - "time" - - "github.com/unknwon/com" - "github.com/urfave/cli" - log "gopkg.in/clog.v1" - - "gogs.io/gogs/models" - "gogs.io/gogs/models/errors" - "gogs.io/gogs/pkg/setting" -) - -const ( - _ACCESS_DENIED_MESSAGE = "Repository does not exist or you do not have access" -) - -var Serv = cli.Command{ - Name: "serv", - Usage: "This command should only be called by SSH shell", - Description: `Serv provide access auth for repositories`, - Action: runServ, - Flags: []cli.Flag{ - stringFlag("config, c", "custom/conf/app.ini", "Custom configuration file path"), - }, -} - -func fail(userMessage, logMessage string, args ...interface{}) { - fmt.Fprintln(os.Stderr, "Gogs:", userMessage) - - if len(logMessage) > 0 { - if !setting.ProdMode { - fmt.Fprintf(os.Stderr, logMessage+"\n", args...) - } - log.Fatal(3, logMessage, args...) - } - - os.Exit(1) -} - -func setup(c *cli.Context, logPath string, connectDB bool) { - if c.IsSet("config") { - setting.CustomConf = c.String("config") - } else if c.GlobalIsSet("config") { - setting.CustomConf = c.GlobalString("config") - } - - setting.NewContext() - - level := log.TRACE - if setting.ProdMode { - level = log.ERROR - } - log.New(log.FILE, log.FileConfig{ - Level: level, - Filename: filepath.Join(setting.LogRootPath, logPath), - FileRotationConfig: log.FileRotationConfig{ - Rotate: true, - Daily: true, - MaxDays: 3, - }, - }) - log.Delete(log.CONSOLE) // Remove primary logger - - if !connectDB { - return - } - - models.LoadConfigs() - - if setting.UseSQLite3 { - workDir, _ := setting.WorkDir() - os.Chdir(workDir) - } - - if err := models.SetEngine(); err != nil { - fail("Internal error", "SetEngine: %v", err) - } -} - -func parseSSHCmd(cmd string) (string, string) { - ss := strings.SplitN(cmd, " ", 2) - if len(ss) != 2 { - return "", "" - } - return ss[0], strings.Replace(ss[1], "'/", "'", 1) -} - -func checkDeployKey(key *models.PublicKey, repo *models.Repository) { - // Check if this deploy key belongs to current repository. - if !models.HasDeployKey(key.ID, repo.ID) { - fail("Key access denied", "Deploy key access denied: [key_id: %d, repo_id: %d]", key.ID, repo.ID) - } - - // Update deploy key activity. - deployKey, err := models.GetDeployKeyByRepo(key.ID, repo.ID) - if err != nil { - fail("Internal error", "GetDeployKey: %v", err) - } - - deployKey.Updated = time.Now() - if err = models.UpdateDeployKey(deployKey); err != nil { - fail("Internal error", "UpdateDeployKey: %v", err) - } -} - -var ( - allowedCommands = map[string]models.AccessMode{ - "git-upload-pack": models.ACCESS_MODE_READ, - "git-upload-archive": models.ACCESS_MODE_READ, - "git-receive-pack": models.ACCESS_MODE_WRITE, - } -) - -func runServ(c *cli.Context) error { - setup(c, "serv.log", true) - - if setting.SSH.Disabled { - println("Gogs: SSH has been disabled") - return nil - } - - if len(c.Args()) < 1 { - fail("Not enough arguments", "Not enough arguments") - } - - sshCmd := os.Getenv("SSH_ORIGINAL_COMMAND") - if len(sshCmd) == 0 { - println("Hi there, You've successfully authenticated, but Gogs does not provide shell access.") - println("If this is unexpected, please log in with password and setup Gogs under another user.") - return nil - } - - verb, args := parseSSHCmd(sshCmd) - repoFullName := strings.ToLower(strings.Trim(args, "'")) - repoFields := strings.SplitN(repoFullName, "/", 2) - if len(repoFields) != 2 { - fail("Invalid repository path", "Invalid repository path: %v", args) - } - ownerName := strings.ToLower(repoFields[0]) - repoName := strings.TrimSuffix(strings.ToLower(repoFields[1]), ".git") - repoName = strings.TrimSuffix(repoName, ".wiki") - - owner, err := models.GetUserByName(ownerName) - if err != nil { - if errors.IsUserNotExist(err) { - fail("Repository owner does not exist", "Unregistered owner: %s", ownerName) - } - fail("Internal error", "Fail to get repository owner '%s': %v", ownerName, err) - } - - repo, err := models.GetRepositoryByName(owner.ID, repoName) - if err != nil { - if errors.IsRepoNotExist(err) { - fail(_ACCESS_DENIED_MESSAGE, "Repository does not exist: %s/%s", owner.Name, repoName) - } - fail("Internal error", "Fail to get repository: %v", err) - } - repo.Owner = owner - - requestMode, ok := allowedCommands[verb] - if !ok { - fail("Unknown git command", "Unknown git command '%s'", verb) - } - - // Prohibit push to mirror repositories. - if requestMode > models.ACCESS_MODE_READ && repo.IsMirror { - fail("Mirror repository is read-only", "") - } - - // Allow anonymous (user is nil) clone for public repositories. - var user *models.User - - key, err := models.GetPublicKeyByID(com.StrTo(strings.TrimPrefix(c.Args()[0], "key-")).MustInt64()) - if err != nil { - fail("Invalid key ID", "Invalid key ID '%s': %v", c.Args()[0], err) - } - - if requestMode == models.ACCESS_MODE_WRITE || repo.IsPrivate { - // Check deploy key or user key. - if key.IsDeployKey() { - if key.Mode < requestMode { - fail("Key permission denied", "Cannot push with deployment key: %d", key.ID) - } - checkDeployKey(key, repo) - } else { - user, err = models.GetUserByKeyID(key.ID) - if err != nil { - fail("Internal error", "Fail to get user by key ID '%d': %v", key.ID, err) - } - - mode, err := models.UserAccessMode(user.ID, repo) - if err != nil { - fail("Internal error", "Fail to check access: %v", err) - } - - if mode < requestMode { - clientMessage := _ACCESS_DENIED_MESSAGE - if mode >= models.ACCESS_MODE_READ { - clientMessage = "You do not have sufficient authorization for this action" - } - fail(clientMessage, - "User '%s' does not have level '%v' access to repository '%s'", - user.Name, requestMode, repoFullName) - } - } - } else { - setting.NewService() - // Check if the key can access to the repository in case of it is a deploy key (a deploy keys != user key). - // A deploy key doesn't represent a signed in user, so in a site with Service.RequireSignInView activated - // we should give read access only in repositories where this deploy key is in use. In other case, a server - // or system using an active deploy key can get read access to all the repositories in a Gogs service. - if key.IsDeployKey() && setting.Service.RequireSignInView { - checkDeployKey(key, repo) - } - } - - // Update user key activity. - if key.ID > 0 { - key, err := models.GetPublicKeyByID(key.ID) - if err != nil { - fail("Internal error", "GetPublicKeyByID: %v", err) - } - - key.Updated = time.Now() - if err = models.UpdatePublicKey(key); err != nil { - fail("Internal error", "UpdatePublicKey: %v", err) - } - } - - // Special handle for Windows. - if setting.IsWindows { - verb = strings.Replace(verb, "-", " ", 1) - } - - var gitCmd *exec.Cmd - verbs := strings.Split(verb, " ") - if len(verbs) == 2 { - gitCmd = exec.Command(verbs[0], verbs[1], repoFullName) - } else { - gitCmd = exec.Command(verb, repoFullName) - } - if requestMode == models.ACCESS_MODE_WRITE { - gitCmd.Env = append(os.Environ(), models.ComposeHookEnvs(models.ComposeHookEnvsOptions{ - AuthUser: user, - OwnerName: owner.Name, - OwnerSalt: owner.Salt, - RepoID: repo.ID, - RepoName: repo.Name, - RepoPath: repo.RepoPath(), - })...) - } - gitCmd.Dir = setting.RepoRootPath - gitCmd.Stdout = os.Stdout - gitCmd.Stdin = os.Stdin - gitCmd.Stderr = os.Stderr - if err = gitCmd.Run(); err != nil { - fail("Internal error", "Fail to execute git command: %v", err) - } - - return nil -} |