From 01c8df01ec0608f1f25b2f1444adabb98fa5ee8a Mon Sep 17 00:00:00 2001
From: Unknwon <u@gogs.io>
Date: Thu, 24 Oct 2019 01:51:46 -0700
Subject: internal: move packages under this directory (#5836)
* Rename pkg -> internal
* Rename routes -> route
* Move route -> internal/route
* Rename models -> db
* Move db -> internal/db
* Fix route2 -> route
* Move cmd -> internal/cmd
* Bump version
---
cmd/serv.go | 272 ------------------------------------------------------------
1 file changed, 272 deletions(-)
delete mode 100644 cmd/serv.go
(limited to 'cmd/serv.go')
diff --git a/cmd/serv.go b/cmd/serv.go
deleted file mode 100644
index c767634e..00000000
--- a/cmd/serv.go
+++ /dev/null
@@ -1,272 +0,0 @@
-// Copyright 2014 The Gogs Authors. All rights reserved.
-// Use of this source code is governed by a MIT-style
-// license that can be found in the LICENSE file.
-
-package cmd
-
-import (
- "fmt"
- "os"
- "os/exec"
- "path/filepath"
- "strings"
- "time"
-
- "github.com/unknwon/com"
- "github.com/urfave/cli"
- log "gopkg.in/clog.v1"
-
- "gogs.io/gogs/models"
- "gogs.io/gogs/models/errors"
- "gogs.io/gogs/pkg/setting"
-)
-
-const (
- _ACCESS_DENIED_MESSAGE = "Repository does not exist or you do not have access"
-)
-
-var Serv = cli.Command{
- Name: "serv",
- Usage: "This command should only be called by SSH shell",
- Description: `Serv provide access auth for repositories`,
- Action: runServ,
- Flags: []cli.Flag{
- stringFlag("config, c", "custom/conf/app.ini", "Custom configuration file path"),
- },
-}
-
-func fail(userMessage, logMessage string, args ...interface{}) {
- fmt.Fprintln(os.Stderr, "Gogs:", userMessage)
-
- if len(logMessage) > 0 {
- if !setting.ProdMode {
- fmt.Fprintf(os.Stderr, logMessage+"\n", args...)
- }
- log.Fatal(3, logMessage, args...)
- }
-
- os.Exit(1)
-}
-
-func setup(c *cli.Context, logPath string, connectDB bool) {
- if c.IsSet("config") {
- setting.CustomConf = c.String("config")
- } else if c.GlobalIsSet("config") {
- setting.CustomConf = c.GlobalString("config")
- }
-
- setting.NewContext()
-
- level := log.TRACE
- if setting.ProdMode {
- level = log.ERROR
- }
- log.New(log.FILE, log.FileConfig{
- Level: level,
- Filename: filepath.Join(setting.LogRootPath, logPath),
- FileRotationConfig: log.FileRotationConfig{
- Rotate: true,
- Daily: true,
- MaxDays: 3,
- },
- })
- log.Delete(log.CONSOLE) // Remove primary logger
-
- if !connectDB {
- return
- }
-
- models.LoadConfigs()
-
- if setting.UseSQLite3 {
- workDir, _ := setting.WorkDir()
- os.Chdir(workDir)
- }
-
- if err := models.SetEngine(); err != nil {
- fail("Internal error", "SetEngine: %v", err)
- }
-}
-
-func parseSSHCmd(cmd string) (string, string) {
- ss := strings.SplitN(cmd, " ", 2)
- if len(ss) != 2 {
- return "", ""
- }
- return ss[0], strings.Replace(ss[1], "'/", "'", 1)
-}
-
-func checkDeployKey(key *models.PublicKey, repo *models.Repository) {
- // Check if this deploy key belongs to current repository.
- if !models.HasDeployKey(key.ID, repo.ID) {
- fail("Key access denied", "Deploy key access denied: [key_id: %d, repo_id: %d]", key.ID, repo.ID)
- }
-
- // Update deploy key activity.
- deployKey, err := models.GetDeployKeyByRepo(key.ID, repo.ID)
- if err != nil {
- fail("Internal error", "GetDeployKey: %v", err)
- }
-
- deployKey.Updated = time.Now()
- if err = models.UpdateDeployKey(deployKey); err != nil {
- fail("Internal error", "UpdateDeployKey: %v", err)
- }
-}
-
-var (
- allowedCommands = map[string]models.AccessMode{
- "git-upload-pack": models.ACCESS_MODE_READ,
- "git-upload-archive": models.ACCESS_MODE_READ,
- "git-receive-pack": models.ACCESS_MODE_WRITE,
- }
-)
-
-func runServ(c *cli.Context) error {
- setup(c, "serv.log", true)
-
- if setting.SSH.Disabled {
- println("Gogs: SSH has been disabled")
- return nil
- }
-
- if len(c.Args()) < 1 {
- fail("Not enough arguments", "Not enough arguments")
- }
-
- sshCmd := os.Getenv("SSH_ORIGINAL_COMMAND")
- if len(sshCmd) == 0 {
- println("Hi there, You've successfully authenticated, but Gogs does not provide shell access.")
- println("If this is unexpected, please log in with password and setup Gogs under another user.")
- return nil
- }
-
- verb, args := parseSSHCmd(sshCmd)
- repoFullName := strings.ToLower(strings.Trim(args, "'"))
- repoFields := strings.SplitN(repoFullName, "/", 2)
- if len(repoFields) != 2 {
- fail("Invalid repository path", "Invalid repository path: %v", args)
- }
- ownerName := strings.ToLower(repoFields[0])
- repoName := strings.TrimSuffix(strings.ToLower(repoFields[1]), ".git")
- repoName = strings.TrimSuffix(repoName, ".wiki")
-
- owner, err := models.GetUserByName(ownerName)
- if err != nil {
- if errors.IsUserNotExist(err) {
- fail("Repository owner does not exist", "Unregistered owner: %s", ownerName)
- }
- fail("Internal error", "Fail to get repository owner '%s': %v", ownerName, err)
- }
-
- repo, err := models.GetRepositoryByName(owner.ID, repoName)
- if err != nil {
- if errors.IsRepoNotExist(err) {
- fail(_ACCESS_DENIED_MESSAGE, "Repository does not exist: %s/%s", owner.Name, repoName)
- }
- fail("Internal error", "Fail to get repository: %v", err)
- }
- repo.Owner = owner
-
- requestMode, ok := allowedCommands[verb]
- if !ok {
- fail("Unknown git command", "Unknown git command '%s'", verb)
- }
-
- // Prohibit push to mirror repositories.
- if requestMode > models.ACCESS_MODE_READ && repo.IsMirror {
- fail("Mirror repository is read-only", "")
- }
-
- // Allow anonymous (user is nil) clone for public repositories.
- var user *models.User
-
- key, err := models.GetPublicKeyByID(com.StrTo(strings.TrimPrefix(c.Args()[0], "key-")).MustInt64())
- if err != nil {
- fail("Invalid key ID", "Invalid key ID '%s': %v", c.Args()[0], err)
- }
-
- if requestMode == models.ACCESS_MODE_WRITE || repo.IsPrivate {
- // Check deploy key or user key.
- if key.IsDeployKey() {
- if key.Mode < requestMode {
- fail("Key permission denied", "Cannot push with deployment key: %d", key.ID)
- }
- checkDeployKey(key, repo)
- } else {
- user, err = models.GetUserByKeyID(key.ID)
- if err != nil {
- fail("Internal error", "Fail to get user by key ID '%d': %v", key.ID, err)
- }
-
- mode, err := models.UserAccessMode(user.ID, repo)
- if err != nil {
- fail("Internal error", "Fail to check access: %v", err)
- }
-
- if mode < requestMode {
- clientMessage := _ACCESS_DENIED_MESSAGE
- if mode >= models.ACCESS_MODE_READ {
- clientMessage = "You do not have sufficient authorization for this action"
- }
- fail(clientMessage,
- "User '%s' does not have level '%v' access to repository '%s'",
- user.Name, requestMode, repoFullName)
- }
- }
- } else {
- setting.NewService()
- // Check if the key can access to the repository in case of it is a deploy key (a deploy keys != user key).
- // A deploy key doesn't represent a signed in user, so in a site with Service.RequireSignInView activated
- // we should give read access only in repositories where this deploy key is in use. In other case, a server
- // or system using an active deploy key can get read access to all the repositories in a Gogs service.
- if key.IsDeployKey() && setting.Service.RequireSignInView {
- checkDeployKey(key, repo)
- }
- }
-
- // Update user key activity.
- if key.ID > 0 {
- key, err := models.GetPublicKeyByID(key.ID)
- if err != nil {
- fail("Internal error", "GetPublicKeyByID: %v", err)
- }
-
- key.Updated = time.Now()
- if err = models.UpdatePublicKey(key); err != nil {
- fail("Internal error", "UpdatePublicKey: %v", err)
- }
- }
-
- // Special handle for Windows.
- if setting.IsWindows {
- verb = strings.Replace(verb, "-", " ", 1)
- }
-
- var gitCmd *exec.Cmd
- verbs := strings.Split(verb, " ")
- if len(verbs) == 2 {
- gitCmd = exec.Command(verbs[0], verbs[1], repoFullName)
- } else {
- gitCmd = exec.Command(verb, repoFullName)
- }
- if requestMode == models.ACCESS_MODE_WRITE {
- gitCmd.Env = append(os.Environ(), models.ComposeHookEnvs(models.ComposeHookEnvsOptions{
- AuthUser: user,
- OwnerName: owner.Name,
- OwnerSalt: owner.Salt,
- RepoID: repo.ID,
- RepoName: repo.Name,
- RepoPath: repo.RepoPath(),
- })...)
- }
- gitCmd.Dir = setting.RepoRootPath
- gitCmd.Stdout = os.Stdout
- gitCmd.Stdin = os.Stdin
- gitCmd.Stderr = os.Stderr
- if err = gitCmd.Run(); err != nil {
- fail("Internal error", "Fail to execute git command: %v", err)
- }
-
- return nil
-}
--
cgit v1.2.3