2013-03-15 00:43:59 +00:00
|
|
|
package auth
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/base64"
|
|
|
|
"encoding/json"
|
|
|
|
"errors"
|
|
|
|
"fmt"
|
|
|
|
"io/ioutil"
|
|
|
|
"net/http"
|
|
|
|
"os"
|
2013-03-22 09:19:39 +00:00
|
|
|
"path"
|
2013-03-15 00:43:59 +00:00
|
|
|
"strings"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Where we store the config file
|
2013-03-22 09:19:39 +00:00
|
|
|
const CONFIGFILE = ".dockercfg"
|
2013-03-15 00:43:59 +00:00
|
|
|
|
|
|
|
// the registry server we want to login against
|
2013-03-22 11:37:18 +00:00
|
|
|
const REGISTRY_SERVER = "https://registry.docker.io"
|
2013-03-15 00:43:59 +00:00
|
|
|
|
|
|
|
type AuthConfig struct {
|
|
|
|
Username string `json:"username"`
|
|
|
|
Password string `json:"password"`
|
|
|
|
Email string `json:"email"`
|
2013-03-22 09:19:39 +00:00
|
|
|
rootPath string `json:-`
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
|
2013-03-22 12:52:13 +00:00
|
|
|
func NewAuthConfig(username, password, email, rootPath string) *AuthConfig {
|
|
|
|
return &AuthConfig{
|
|
|
|
Username: username,
|
|
|
|
Password: password,
|
|
|
|
Email: email,
|
|
|
|
rootPath: rootPath,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2013-03-15 00:43:59 +00:00
|
|
|
// create a base64 encoded auth string to store in config
|
2013-03-22 09:19:39 +00:00
|
|
|
func EncodeAuth(authConfig *AuthConfig) string {
|
2013-03-15 00:43:59 +00:00
|
|
|
authStr := authConfig.Username + ":" + authConfig.Password
|
|
|
|
msg := []byte(authStr)
|
|
|
|
encoded := make([]byte, base64.StdEncoding.EncodedLen(len(msg)))
|
|
|
|
base64.StdEncoding.Encode(encoded, msg)
|
|
|
|
return string(encoded)
|
|
|
|
}
|
|
|
|
|
|
|
|
// decode the auth string
|
2013-03-22 09:19:39 +00:00
|
|
|
func DecodeAuth(authStr string) (*AuthConfig, error) {
|
2013-03-15 00:43:59 +00:00
|
|
|
decLen := base64.StdEncoding.DecodedLen(len(authStr))
|
|
|
|
decoded := make([]byte, decLen)
|
|
|
|
authByte := []byte(authStr)
|
|
|
|
n, err := base64.StdEncoding.Decode(decoded, authByte)
|
|
|
|
if err != nil {
|
2013-03-22 09:19:39 +00:00
|
|
|
return nil, err
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
if n > decLen {
|
2013-03-22 09:19:39 +00:00
|
|
|
return nil, fmt.Errorf("Something went wrong decoding auth config")
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
arr := strings.Split(string(decoded), ":")
|
2013-03-22 09:19:39 +00:00
|
|
|
if len(arr) != 2 {
|
|
|
|
return nil, fmt.Errorf("Invalid auth configuration file")
|
|
|
|
}
|
2013-03-15 00:43:59 +00:00
|
|
|
password := strings.Trim(arr[1], "\x00")
|
2013-03-22 09:19:39 +00:00
|
|
|
return &AuthConfig{Username: arr[0], Password: password}, nil
|
2013-03-15 00:43:59 +00:00
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
// load up the auth config information and return values
|
2013-03-22 09:19:39 +00:00
|
|
|
// FIXME: use the internal golang config parser
|
|
|
|
func LoadConfig(rootPath string) (*AuthConfig, error) {
|
|
|
|
confFile := path.Join(rootPath, CONFIGFILE)
|
|
|
|
if _, err := os.Stat(confFile); err != nil {
|
|
|
|
return &AuthConfig{}, fmt.Errorf("The Auth config file is missing")
|
|
|
|
}
|
|
|
|
b, err := ioutil.ReadFile(confFile)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
arr := strings.Split(string(b), "\n")
|
2013-03-29 00:12:23 +00:00
|
|
|
origAuth := strings.Split(arr[0], " = ")
|
|
|
|
origEmail := strings.Split(arr[1], " = ")
|
|
|
|
authConfig, err := DecodeAuth(origAuth[1])
|
2013-03-22 09:19:39 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-29 00:12:23 +00:00
|
|
|
authConfig.Email = origEmail[1]
|
2013-03-22 09:19:39 +00:00
|
|
|
authConfig.rootPath = rootPath
|
|
|
|
return authConfig, nil
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// save the auth config
|
2013-03-22 09:19:39 +00:00
|
|
|
func saveConfig(rootPath, authStr string, email string) error {
|
2013-03-15 00:43:59 +00:00
|
|
|
lines := "auth = " + authStr + "\n" + "email = " + email + "\n"
|
|
|
|
b := []byte(lines)
|
2013-03-22 09:19:39 +00:00
|
|
|
err := ioutil.WriteFile(path.Join(rootPath, CONFIGFILE), b, 0600)
|
2013-03-15 00:43:59 +00:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// try to register/login to the registry server
|
2013-03-22 09:19:39 +00:00
|
|
|
func Login(authConfig *AuthConfig) (string, error) {
|
2013-03-15 00:43:59 +00:00
|
|
|
storeConfig := false
|
|
|
|
reqStatusCode := 0
|
|
|
|
var status string
|
2013-03-15 21:48:42 +00:00
|
|
|
var errMsg string
|
2013-03-15 00:43:59 +00:00
|
|
|
var reqBody []byte
|
2013-03-15 21:41:55 +00:00
|
|
|
jsonBody, err := json.Marshal(authConfig)
|
|
|
|
if err != nil {
|
|
|
|
errMsg = fmt.Sprintf("Config Error: %s", err)
|
|
|
|
return "", errors.New(errMsg)
|
|
|
|
}
|
|
|
|
|
2013-04-02 10:00:21 +00:00
|
|
|
// using `bytes.NewReader(jsonBody)` here causes the server to respond with a 411 status.
|
|
|
|
b := strings.NewReader(string(jsonBody))
|
2013-03-15 00:43:59 +00:00
|
|
|
req1, err := http.Post(REGISTRY_SERVER+"/v1/users", "application/json; charset=utf-8", b)
|
2013-03-15 01:43:02 +00:00
|
|
|
if err != nil {
|
2013-03-15 21:41:55 +00:00
|
|
|
errMsg = fmt.Sprintf("Server Error: %s", err)
|
|
|
|
return "", errors.New(errMsg)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
|
|
|
|
reqStatusCode = req1.StatusCode
|
2013-03-15 21:41:55 +00:00
|
|
|
defer req1.Body.Close()
|
|
|
|
reqBody, err = ioutil.ReadAll(req1.Body)
|
|
|
|
if err != nil {
|
2013-03-15 22:04:36 +00:00
|
|
|
errMsg = fmt.Sprintf("Server Error: [%#v] %s", reqStatusCode, err)
|
2013-03-15 21:41:55 +00:00
|
|
|
return "", errors.New(errMsg)
|
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
|
2013-03-15 00:43:59 +00:00
|
|
|
if reqStatusCode == 201 {
|
|
|
|
status = "Account Created\n"
|
|
|
|
storeConfig = true
|
|
|
|
} else if reqStatusCode == 400 {
|
2013-03-30 07:22:24 +00:00
|
|
|
// FIXME: This should be 'exists', not 'exist'. Need to change on the server first.
|
2013-03-15 00:43:59 +00:00
|
|
|
if string(reqBody) == "Username or email already exist" {
|
|
|
|
client := &http.Client{}
|
|
|
|
req, err := http.NewRequest("GET", REGISTRY_SERVER+"/v1/users", nil)
|
|
|
|
req.SetBasicAuth(authConfig.Username, authConfig.Password)
|
|
|
|
resp, err := client.Do(req)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
defer resp.Body.Close()
|
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
if resp.StatusCode == 200 {
|
|
|
|
status = "Login Succeeded\n"
|
|
|
|
storeConfig = true
|
|
|
|
} else {
|
2013-03-15 03:23:45 +00:00
|
|
|
status = fmt.Sprintf("Login: %s", body)
|
2013-03-15 01:43:02 +00:00
|
|
|
return "", errors.New(status)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
} else {
|
2013-03-30 07:22:56 +00:00
|
|
|
status = fmt.Sprintf("Registration: %s", reqBody)
|
2013-03-15 01:43:02 +00:00
|
|
|
return "", errors.New(status)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
} else {
|
2013-03-30 07:22:56 +00:00
|
|
|
status = fmt.Sprintf("[%s] : %s", reqStatusCode, reqBody)
|
2013-03-15 01:43:02 +00:00
|
|
|
return "", errors.New(status)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
if storeConfig {
|
|
|
|
authStr := EncodeAuth(authConfig)
|
2013-03-22 09:19:39 +00:00
|
|
|
saveConfig(authConfig.rootPath, authStr, authConfig.Email)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
return status, nil
|
|
|
|
}
|