You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

auth.go 6.9KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279
  1. // Copyright 2014 The Gogs Authors. All rights reserved.
  2. // Use of this source code is governed by a MIT-style
  3. // license that can be found in the LICENSE file.
  4. package auth
  5. import (
  6. "reflect"
  7. "strings"
  8. "github.com/Unknwon/com"
  9. "github.com/go-macaron/binding"
  10. "github.com/go-macaron/session"
  11. gouuid "github.com/satori/go.uuid"
  12. "gopkg.in/macaron.v1"
  13. "code.gitea.io/gitea/models"
  14. "code.gitea.io/gitea/modules/base"
  15. "code.gitea.io/gitea/modules/log"
  16. "code.gitea.io/gitea/modules/setting"
  17. "code.gitea.io/gitea/modules/util"
  18. "code.gitea.io/gitea/modules/validation"
  19. )
  20. // IsAPIPath if URL is an api path
  21. func IsAPIPath(url string) bool {
  22. return strings.HasPrefix(url, "/api/")
  23. }
  24. // SignedInID returns the id of signed in user.
  25. func SignedInID(ctx *macaron.Context, sess session.Store) int64 {
  26. if !models.HasEngine {
  27. return 0
  28. }
  29. // Check access token.
  30. if IsAPIPath(ctx.Req.URL.Path) {
  31. tokenSHA := ctx.Query("token")
  32. if len(tokenSHA) == 0 {
  33. tokenSHA = ctx.Query("access_token")
  34. }
  35. if len(tokenSHA) == 0 {
  36. // Well, check with header again.
  37. auHead := ctx.Req.Header.Get("Authorization")
  38. if len(auHead) > 0 {
  39. auths := strings.Fields(auHead)
  40. if len(auths) == 2 && auths[0] == "token" {
  41. tokenSHA = auths[1]
  42. }
  43. }
  44. }
  45. // Let's see if token is valid.
  46. if len(tokenSHA) > 0 {
  47. t, err := models.GetAccessTokenBySHA(tokenSHA)
  48. if err != nil {
  49. if models.IsErrAccessTokenNotExist(err) || models.IsErrAccessTokenEmpty(err) {
  50. log.Error(4, "GetAccessTokenBySHA: %v", err)
  51. }
  52. return 0
  53. }
  54. t.UpdatedUnix = util.TimeStampNow()
  55. if err = models.UpdateAccessToken(t); err != nil {
  56. log.Error(4, "UpdateAccessToken: %v", err)
  57. }
  58. ctx.Data["IsApiToken"] = true
  59. return t.UID
  60. }
  61. }
  62. uid := sess.Get("uid")
  63. if uid == nil {
  64. return 0
  65. } else if id, ok := uid.(int64); ok {
  66. return id
  67. }
  68. return 0
  69. }
  70. // SignedInUser returns the user object of signed user.
  71. // It returns a bool value to indicate whether user uses basic auth or not.
  72. func SignedInUser(ctx *macaron.Context, sess session.Store) (*models.User, bool) {
  73. if !models.HasEngine {
  74. return nil, false
  75. }
  76. if uid := SignedInID(ctx, sess); uid > 0 {
  77. user, err := models.GetUserByID(uid)
  78. if err == nil {
  79. return user, false
  80. } else if !models.IsErrUserNotExist(err) {
  81. log.Error(4, "GetUserById: %v", err)
  82. }
  83. }
  84. if setting.Service.EnableReverseProxyAuth {
  85. webAuthUser := ctx.Req.Header.Get(setting.ReverseProxyAuthUser)
  86. if len(webAuthUser) > 0 {
  87. u, err := models.GetUserByName(webAuthUser)
  88. if err != nil {
  89. if !models.IsErrUserNotExist(err) {
  90. log.Error(4, "GetUserByName: %v", err)
  91. return nil, false
  92. }
  93. // Check if enabled auto-registration.
  94. if setting.Service.EnableReverseProxyAutoRegister {
  95. u := &models.User{
  96. Name: webAuthUser,
  97. Email: gouuid.NewV4().String() + "@localhost",
  98. Passwd: webAuthUser,
  99. IsActive: true,
  100. }
  101. if err = models.CreateUser(u); err != nil {
  102. // FIXME: should I create a system notice?
  103. log.Error(4, "CreateUser: %v", err)
  104. return nil, false
  105. }
  106. return u, false
  107. }
  108. }
  109. return u, false
  110. }
  111. }
  112. // Check with basic auth.
  113. baHead := ctx.Req.Header.Get("Authorization")
  114. if len(baHead) > 0 {
  115. auths := strings.Fields(baHead)
  116. if len(auths) == 2 && auths[0] == "Basic" {
  117. uname, passwd, _ := base.BasicAuthDecode(auths[1])
  118. u, err := models.UserSignIn(uname, passwd)
  119. if err != nil {
  120. if !models.IsErrUserNotExist(err) {
  121. log.Error(4, "UserSignIn: %v", err)
  122. }
  123. return nil, false
  124. }
  125. ctx.Data["IsApiToken"] = true
  126. return u, true
  127. }
  128. }
  129. return nil, false
  130. }
  131. // Form form binding interface
  132. type Form interface {
  133. binding.Validator
  134. }
  135. func init() {
  136. binding.SetNameMapper(com.ToSnakeCase)
  137. }
  138. // AssignForm assign form values back to the template data.
  139. func AssignForm(form interface{}, data map[string]interface{}) {
  140. typ := reflect.TypeOf(form)
  141. val := reflect.ValueOf(form)
  142. if typ.Kind() == reflect.Ptr {
  143. typ = typ.Elem()
  144. val = val.Elem()
  145. }
  146. for i := 0; i < typ.NumField(); i++ {
  147. field := typ.Field(i)
  148. fieldName := field.Tag.Get("form")
  149. // Allow ignored fields in the struct
  150. if fieldName == "-" {
  151. continue
  152. } else if len(fieldName) == 0 {
  153. fieldName = com.ToSnakeCase(field.Name)
  154. }
  155. data[fieldName] = val.Field(i).Interface()
  156. }
  157. }
  158. func getRuleBody(field reflect.StructField, prefix string) string {
  159. for _, rule := range strings.Split(field.Tag.Get("binding"), ";") {
  160. if strings.HasPrefix(rule, prefix) {
  161. return rule[len(prefix) : len(rule)-1]
  162. }
  163. }
  164. return ""
  165. }
  166. // GetSize get size int form tag
  167. func GetSize(field reflect.StructField) string {
  168. return getRuleBody(field, "Size(")
  169. }
  170. // GetMinSize get minimal size in form tag
  171. func GetMinSize(field reflect.StructField) string {
  172. return getRuleBody(field, "MinSize(")
  173. }
  174. // GetMaxSize get max size in form tag
  175. func GetMaxSize(field reflect.StructField) string {
  176. return getRuleBody(field, "MaxSize(")
  177. }
  178. // GetInclude get include in form tag
  179. func GetInclude(field reflect.StructField) string {
  180. return getRuleBody(field, "Include(")
  181. }
  182. // FIXME: struct contains a struct
  183. func validateStruct(obj interface{}) binding.Errors {
  184. return nil
  185. }
  186. func validate(errs binding.Errors, data map[string]interface{}, f Form, l macaron.Locale) binding.Errors {
  187. if errs.Len() == 0 {
  188. return errs
  189. }
  190. data["HasError"] = true
  191. AssignForm(f, data)
  192. typ := reflect.TypeOf(f)
  193. val := reflect.ValueOf(f)
  194. if typ.Kind() == reflect.Ptr {
  195. typ = typ.Elem()
  196. val = val.Elem()
  197. }
  198. for i := 0; i < typ.NumField(); i++ {
  199. field := typ.Field(i)
  200. fieldName := field.Tag.Get("form")
  201. // Allow ignored fields in the struct
  202. if fieldName == "-" {
  203. continue
  204. }
  205. if errs[0].FieldNames[0] == field.Name {
  206. data["Err_"+field.Name] = true
  207. trName := field.Tag.Get("locale")
  208. if len(trName) == 0 {
  209. trName = l.Tr("form." + field.Name)
  210. } else {
  211. trName = l.Tr(trName)
  212. }
  213. switch errs[0].Classification {
  214. case binding.ERR_REQUIRED:
  215. data["ErrorMsg"] = trName + l.Tr("form.require_error")
  216. case binding.ERR_ALPHA_DASH:
  217. data["ErrorMsg"] = trName + l.Tr("form.alpha_dash_error")
  218. case binding.ERR_ALPHA_DASH_DOT:
  219. data["ErrorMsg"] = trName + l.Tr("form.alpha_dash_dot_error")
  220. case validation.ErrGitRefName:
  221. data["ErrorMsg"] = trName + l.Tr("form.git_ref_name_error")
  222. case binding.ERR_SIZE:
  223. data["ErrorMsg"] = trName + l.Tr("form.size_error", GetSize(field))
  224. case binding.ERR_MIN_SIZE:
  225. data["ErrorMsg"] = trName + l.Tr("form.min_size_error", GetMinSize(field))
  226. case binding.ERR_MAX_SIZE:
  227. data["ErrorMsg"] = trName + l.Tr("form.max_size_error", GetMaxSize(field))
  228. case binding.ERR_EMAIL:
  229. data["ErrorMsg"] = trName + l.Tr("form.email_error")
  230. case binding.ERR_URL:
  231. data["ErrorMsg"] = trName + l.Tr("form.url_error")
  232. case binding.ERR_INCLUDE:
  233. data["ErrorMsg"] = trName + l.Tr("form.include_error", GetInclude(field))
  234. default:
  235. data["ErrorMsg"] = l.Tr("form.unknown_error") + " " + errs[0].Classification
  236. }
  237. return errs
  238. }
  239. }
  240. return errs
  241. }