9b2fcadeef
`show` is keyword in MySQL and has to be quoted to reference a column name. Use grave accents (ASCII code 96) for quoting to match rest of the source code. It's non-standard SQL, but it's supported by SQLite and MySQL. Signed-off-by: Filip Navara <navara@emclient.com>
124 lines
2.8 KiB
Go
124 lines
2.8 KiB
Go
// Copyright 2017 The Gitea Authors. All rights reserved.
|
|
// Use of this source code is governed by a MIT-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package models
|
|
|
|
import (
|
|
"errors"
|
|
|
|
"code.gitea.io/gitea/modules/auth/openid"
|
|
"code.gitea.io/gitea/modules/log"
|
|
)
|
|
|
|
var (
|
|
// ErrOpenIDNotExist openid is not known
|
|
ErrOpenIDNotExist = errors.New("OpenID is unknown")
|
|
)
|
|
|
|
// UserOpenID is the list of all OpenID identities of a user.
|
|
type UserOpenID struct {
|
|
ID int64 `xorm:"pk autoincr"`
|
|
UID int64 `xorm:"INDEX NOT NULL"`
|
|
URI string `xorm:"UNIQUE NOT NULL"`
|
|
Show bool `xorm:"DEFAULT false"`
|
|
}
|
|
|
|
// GetUserOpenIDs returns all openid addresses that belongs to given user.
|
|
func GetUserOpenIDs(uid int64) ([]*UserOpenID, error) {
|
|
openids := make([]*UserOpenID, 0, 5)
|
|
if err := x.
|
|
Where("uid=?", uid).
|
|
Asc("id").
|
|
Find(&openids); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return openids, nil
|
|
}
|
|
|
|
func isOpenIDUsed(e Engine, uri string) (bool, error) {
|
|
if len(uri) == 0 {
|
|
return true, nil
|
|
}
|
|
|
|
return e.Get(&UserOpenID{URI: uri})
|
|
}
|
|
|
|
// IsOpenIDUsed returns true if the openid has been used.
|
|
func IsOpenIDUsed(openid string) (bool, error) {
|
|
return isOpenIDUsed(x, openid)
|
|
}
|
|
|
|
// NOTE: make sure openid.URI is normalized already
|
|
func addUserOpenID(e Engine, openid *UserOpenID) error {
|
|
used, err := isOpenIDUsed(e, openid.URI)
|
|
if err != nil {
|
|
return err
|
|
} else if used {
|
|
return ErrOpenIDAlreadyUsed{openid.URI}
|
|
}
|
|
|
|
_, err = e.Insert(openid)
|
|
return err
|
|
}
|
|
|
|
// AddUserOpenID adds an pre-verified/normalized OpenID URI to given user.
|
|
func AddUserOpenID(openid *UserOpenID) error {
|
|
return addUserOpenID(x, openid)
|
|
}
|
|
|
|
// DeleteUserOpenID deletes an openid address of given user.
|
|
func DeleteUserOpenID(openid *UserOpenID) (err error) {
|
|
var deleted int64
|
|
// ask to check UID
|
|
var address = UserOpenID{
|
|
UID: openid.UID,
|
|
}
|
|
if openid.ID > 0 {
|
|
deleted, err = x.ID(openid.ID).Delete(&address)
|
|
} else {
|
|
deleted, err = x.
|
|
Where("openid=?", openid.URI).
|
|
Delete(&address)
|
|
}
|
|
|
|
if err != nil {
|
|
return err
|
|
} else if deleted != 1 {
|
|
return ErrOpenIDNotExist
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// ToggleUserOpenIDVisibility toggles visibility of an openid address of given user.
|
|
func ToggleUserOpenIDVisibility(id int64) (err error) {
|
|
_, err = x.Exec("update `user_open_id` set `show` = not `show` where `id` = ?", id)
|
|
return err
|
|
}
|
|
|
|
// GetUserByOpenID returns the user object by given OpenID if exists.
|
|
func GetUserByOpenID(uri string) (*User, error) {
|
|
if len(uri) == 0 {
|
|
return nil, ErrUserNotExist{0, uri, 0}
|
|
}
|
|
|
|
uri, err := openid.Normalize(uri)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
log.Trace("Normalized OpenID URI: " + uri)
|
|
|
|
// Otherwise, check in openid table
|
|
oid := &UserOpenID{URI: uri}
|
|
has, err := x.Get(oid)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if has {
|
|
return GetUserByID(oid.UID)
|
|
}
|
|
|
|
return nil, ErrUserNotExist{0, uri, 0}
|
|
}
|