2017-04-19 05:45:01 +02:00
// Copyright 2017 The Gitea Authors. All rights reserved.
// Use of this source code is governed by a MIT-style
// license that can be found in the LICENSE file.
// Package private includes all internal routes. The package name internal is ideal but Golang is not allowed, so we use private as package name instead.
package private
import (
"strings"
"code.gitea.io/gitea/models"
"code.gitea.io/gitea/modules/setting"
2017-05-04 07:42:02 +02:00
2017-04-19 05:45:01 +02:00
macaron "gopkg.in/macaron.v1"
)
// CheckInternalToken check internal token is set
func CheckInternalToken ( ctx * macaron . Context ) {
tokens := ctx . Req . Header . Get ( "Authorization" )
fields := strings . Fields ( tokens )
if len ( fields ) != 2 || fields [ 0 ] != "Bearer" || fields [ 1 ] != setting . InternalToken {
ctx . Error ( 403 )
}
}
2018-10-30 07:20:13 +01:00
//GetRepositoryByOwnerAndName chainload to models.GetRepositoryByOwnerAndName
func GetRepositoryByOwnerAndName ( ctx * macaron . Context ) {
//TODO use repo.Get(ctx *context.APIContext) ?
ownerName := ctx . Params ( ":owner" )
repoName := ctx . Params ( ":repo" )
repo , err := models . GetRepositoryByOwnerAndName ( ownerName , repoName )
if err != nil {
2017-04-19 05:45:01 +02:00
ctx . JSON ( 500 , map [ string ] interface { } {
"err" : err . Error ( ) ,
} )
return
}
2018-10-30 07:20:13 +01:00
ctx . JSON ( 200 , repo )
}
//AccessLevel chainload to models.AccessLevel
func AccessLevel ( ctx * macaron . Context ) {
repoID := ctx . ParamsInt64 ( ":repoid" )
userID := ctx . ParamsInt64 ( ":userid" )
repo , err := models . GetRepositoryByID ( repoID )
if err != nil {
ctx . JSON ( 500 , map [ string ] interface { } {
"err" : err . Error ( ) ,
} )
return
}
al , err := models . AccessLevel ( userID , repo )
if err != nil {
ctx . JSON ( 500 , map [ string ] interface { } {
"err" : err . Error ( ) ,
} )
return
}
ctx . JSON ( 200 , al )
}
2017-04-19 05:45:01 +02:00
2018-10-30 07:20:13 +01:00
//CheckUnitUser chainload to models.CheckUnitUser
func CheckUnitUser ( ctx * macaron . Context ) {
repoID := ctx . ParamsInt64 ( ":repoid" )
userID := ctx . ParamsInt64 ( ":userid" )
repo , err := models . GetRepositoryByID ( repoID )
if err != nil {
ctx . JSON ( 500 , map [ string ] interface { } {
"err" : err . Error ( ) ,
} )
return
}
if repo . CheckUnitUser ( userID , ctx . QueryBool ( "isAdmin" ) , models . UnitType ( ctx . QueryInt ( "unitType" ) ) ) {
ctx . PlainText ( 200 , [ ] byte ( "success" ) )
return
}
ctx . PlainText ( 404 , [ ] byte ( "no access" ) )
2017-04-19 05:45:01 +02:00
}
// RegisterRoutes registers all internal APIs routes to web application.
// These APIs will be invoked by internal commands for example `gitea serv` and etc.
func RegisterRoutes ( m * macaron . Macaron ) {
m . Group ( "/" , func ( ) {
2018-10-30 07:20:13 +01:00
m . Get ( "/ssh/:id" , GetPublicKeyByID )
m . Get ( "/ssh/:id/user" , GetUserByKeyID )
2017-04-19 05:45:01 +02:00
m . Post ( "/ssh/:id/update" , UpdatePublicKey )
2018-10-30 07:20:13 +01:00
m . Post ( "/repositories/:repoid/keys/:keyid/update" , UpdateDeployKey )
m . Get ( "/repositories/:repoid/user/:userid/accesslevel" , AccessLevel )
m . Get ( "/repositories/:repoid/user/:userid/checkunituser" , CheckUnitUser )
m . Get ( "/repositories/:repoid/has-keys/:keyid" , HasDeployKey )
2017-05-04 07:42:02 +02:00
m . Post ( "/push/update" , PushUpdate )
2017-09-14 10:16:22 +02:00
m . Get ( "/protectedbranch/:pbid/:userid" , CanUserPush )
2018-10-30 07:20:13 +01:00
m . Get ( "/repo/:owner/:repo" , GetRepositoryByOwnerAndName )
2017-05-08 04:55:27 +02:00
m . Get ( "/branch/:id/*" , GetProtectedBranchBy )
2018-10-20 08:59:06 +02:00
m . Get ( "/repository/:rid" , GetRepository )
m . Get ( "/active-pull-request" , GetActivePullRequest )
2017-04-19 05:45:01 +02:00
} , CheckInternalToken )
}