2013-03-15 00:43:59 +00:00
|
|
|
package auth
|
|
|
|
|
|
|
|
import (
|
|
|
|
"encoding/base64"
|
|
|
|
"encoding/json"
|
2013-05-29 00:35:10 +00:00
|
|
|
"errors"
|
2013-03-15 00:43:59 +00:00
|
|
|
"fmt"
|
|
|
|
"io/ioutil"
|
|
|
|
"net/http"
|
|
|
|
"os"
|
2013-03-22 09:19:39 +00:00
|
|
|
"path"
|
2013-03-15 00:43:59 +00:00
|
|
|
"strings"
|
|
|
|
)
|
|
|
|
|
|
|
|
// Where we store the config file
|
2013-03-22 09:19:39 +00:00
|
|
|
const CONFIGFILE = ".dockercfg"
|
2013-03-15 00:43:59 +00:00
|
|
|
|
|
|
|
// the registry server we want to login against
|
2013-06-04 18:00:22 +00:00
|
|
|
const INDEXSERVER = "https://index.docker.io/v1"
|
2013-03-15 00:43:59 +00:00
|
|
|
|
2013-06-04 18:00:22 +00:00
|
|
|
//const INDEXSERVER = "http://indexstaging-docker.dotcloud.com/"
|
2013-05-29 00:35:10 +00:00
|
|
|
|
|
|
|
var (
|
2013-06-04 13:51:12 +00:00
|
|
|
ErrConfigFileMissing = errors.New("The Auth config file is missing")
|
2013-05-29 00:35:10 +00:00
|
|
|
)
|
|
|
|
|
2013-03-15 00:43:59 +00:00
|
|
|
type AuthConfig struct {
|
|
|
|
Username string `json:"username"`
|
|
|
|
Password string `json:"password"`
|
|
|
|
Email string `json:"email"`
|
2013-05-15 20:02:24 +00:00
|
|
|
rootPath string
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
|
2013-03-22 12:52:13 +00:00
|
|
|
func NewAuthConfig(username, password, email, rootPath string) *AuthConfig {
|
|
|
|
return &AuthConfig{
|
|
|
|
Username: username,
|
|
|
|
Password: password,
|
|
|
|
Email: email,
|
|
|
|
rootPath: rootPath,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2013-05-08 17:21:21 +00:00
|
|
|
func IndexServerAddress() string {
|
|
|
|
if os.Getenv("DOCKER_INDEX_URL") != "" {
|
2013-05-09 14:41:59 +00:00
|
|
|
return os.Getenv("DOCKER_INDEX_URL") + "/v1"
|
2013-05-08 17:21:21 +00:00
|
|
|
}
|
2013-06-04 18:00:22 +00:00
|
|
|
return INDEXSERVER
|
2013-05-08 17:21:21 +00:00
|
|
|
}
|
|
|
|
|
2013-03-15 00:43:59 +00:00
|
|
|
// create a base64 encoded auth string to store in config
|
2013-05-30 15:39:43 +00:00
|
|
|
func encodeAuth(authConfig *AuthConfig) string {
|
2013-03-15 00:43:59 +00:00
|
|
|
authStr := authConfig.Username + ":" + authConfig.Password
|
|
|
|
msg := []byte(authStr)
|
|
|
|
encoded := make([]byte, base64.StdEncoding.EncodedLen(len(msg)))
|
|
|
|
base64.StdEncoding.Encode(encoded, msg)
|
|
|
|
return string(encoded)
|
|
|
|
}
|
|
|
|
|
|
|
|
// decode the auth string
|
2013-05-30 15:39:43 +00:00
|
|
|
func decodeAuth(authStr string) (*AuthConfig, error) {
|
2013-03-15 00:43:59 +00:00
|
|
|
decLen := base64.StdEncoding.DecodedLen(len(authStr))
|
|
|
|
decoded := make([]byte, decLen)
|
|
|
|
authByte := []byte(authStr)
|
|
|
|
n, err := base64.StdEncoding.Decode(decoded, authByte)
|
|
|
|
if err != nil {
|
2013-03-22 09:19:39 +00:00
|
|
|
return nil, err
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
if n > decLen {
|
2013-03-22 09:19:39 +00:00
|
|
|
return nil, fmt.Errorf("Something went wrong decoding auth config")
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
arr := strings.Split(string(decoded), ":")
|
2013-03-22 09:19:39 +00:00
|
|
|
if len(arr) != 2 {
|
|
|
|
return nil, fmt.Errorf("Invalid auth configuration file")
|
|
|
|
}
|
2013-03-15 00:43:59 +00:00
|
|
|
password := strings.Trim(arr[1], "\x00")
|
2013-03-22 09:19:39 +00:00
|
|
|
return &AuthConfig{Username: arr[0], Password: password}, nil
|
2013-03-15 00:43:59 +00:00
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
// load up the auth config information and return values
|
2013-03-22 09:19:39 +00:00
|
|
|
// FIXME: use the internal golang config parser
|
|
|
|
func LoadConfig(rootPath string) (*AuthConfig, error) {
|
|
|
|
confFile := path.Join(rootPath, CONFIGFILE)
|
|
|
|
if _, err := os.Stat(confFile); err != nil {
|
2013-06-19 14:50:58 +00:00
|
|
|
return &AuthConfig{rootPath: rootPath}, ErrConfigFileMissing
|
2013-03-22 09:19:39 +00:00
|
|
|
}
|
|
|
|
b, err := ioutil.ReadFile(confFile)
|
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
|
|
|
}
|
|
|
|
arr := strings.Split(string(b), "\n")
|
2013-05-01 23:36:01 +00:00
|
|
|
if len(arr) < 2 {
|
|
|
|
return nil, fmt.Errorf("The Auth config file is empty")
|
|
|
|
}
|
2013-03-29 00:12:23 +00:00
|
|
|
origAuth := strings.Split(arr[0], " = ")
|
|
|
|
origEmail := strings.Split(arr[1], " = ")
|
2013-05-30 15:39:43 +00:00
|
|
|
authConfig, err := decodeAuth(origAuth[1])
|
2013-03-22 09:19:39 +00:00
|
|
|
if err != nil {
|
|
|
|
return nil, err
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-29 00:12:23 +00:00
|
|
|
authConfig.Email = origEmail[1]
|
2013-03-22 09:19:39 +00:00
|
|
|
authConfig.rootPath = rootPath
|
|
|
|
return authConfig, nil
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
// save the auth config
|
2013-05-30 15:39:43 +00:00
|
|
|
func SaveConfig(authConfig *AuthConfig) error {
|
|
|
|
confFile := path.Join(authConfig.rootPath, CONFIGFILE)
|
|
|
|
if len(authConfig.Email) == 0 {
|
2013-05-01 23:36:01 +00:00
|
|
|
os.Remove(confFile)
|
|
|
|
return nil
|
|
|
|
}
|
2013-05-30 15:39:43 +00:00
|
|
|
lines := "auth = " + encodeAuth(authConfig) + "\n" + "email = " + authConfig.Email + "\n"
|
2013-03-15 00:43:59 +00:00
|
|
|
b := []byte(lines)
|
2013-05-01 23:36:01 +00:00
|
|
|
err := ioutil.WriteFile(confFile, b, 0600)
|
2013-03-15 00:43:59 +00:00
|
|
|
if err != nil {
|
|
|
|
return err
|
|
|
|
}
|
|
|
|
return nil
|
|
|
|
}
|
|
|
|
|
|
|
|
// try to register/login to the registry server
|
2013-06-03 12:09:16 +00:00
|
|
|
func Login(authConfig *AuthConfig, store bool) (string, error) {
|
|
|
|
storeConfig := false
|
2013-04-24 19:15:34 +00:00
|
|
|
client := &http.Client{}
|
2013-03-15 00:43:59 +00:00
|
|
|
reqStatusCode := 0
|
|
|
|
var status string
|
|
|
|
var reqBody []byte
|
2013-03-15 21:41:55 +00:00
|
|
|
jsonBody, err := json.Marshal(authConfig)
|
|
|
|
if err != nil {
|
2013-04-24 16:11:29 +00:00
|
|
|
return "", fmt.Errorf("Config Error: %s", err)
|
2013-03-15 21:41:55 +00:00
|
|
|
}
|
|
|
|
|
2013-04-02 10:00:21 +00:00
|
|
|
// using `bytes.NewReader(jsonBody)` here causes the server to respond with a 411 status.
|
|
|
|
b := strings.NewReader(string(jsonBody))
|
2013-05-09 14:41:59 +00:00
|
|
|
req1, err := http.Post(IndexServerAddress()+"/users/", "application/json; charset=utf-8", b)
|
2013-03-15 01:43:02 +00:00
|
|
|
if err != nil {
|
2013-04-24 16:11:29 +00:00
|
|
|
return "", fmt.Errorf("Server Error: %s", err)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
reqStatusCode = req1.StatusCode
|
2013-03-15 21:41:55 +00:00
|
|
|
defer req1.Body.Close()
|
|
|
|
reqBody, err = ioutil.ReadAll(req1.Body)
|
|
|
|
if err != nil {
|
2013-04-24 16:11:29 +00:00
|
|
|
return "", fmt.Errorf("Server Error: [%#v] %s", reqStatusCode, err)
|
2013-03-15 21:41:55 +00:00
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
|
2013-03-15 00:43:59 +00:00
|
|
|
if reqStatusCode == 201 {
|
2013-05-02 22:39:44 +00:00
|
|
|
status = "Account created. Please use the confirmation link we sent" +
|
2013-06-14 13:38:51 +00:00
|
|
|
" to your e-mail to activate it."
|
2013-06-03 12:09:16 +00:00
|
|
|
storeConfig = true
|
2013-05-01 20:41:58 +00:00
|
|
|
} else if reqStatusCode == 403 {
|
2013-05-02 22:39:44 +00:00
|
|
|
return "", fmt.Errorf("Login: Your account hasn't been activated. " +
|
2013-05-01 20:41:58 +00:00
|
|
|
"Please check your e-mail for a confirmation link.")
|
2013-03-15 00:43:59 +00:00
|
|
|
} else if reqStatusCode == 400 {
|
2013-05-01 16:06:17 +00:00
|
|
|
if string(reqBody) == "\"Username or email already exists\"" {
|
2013-05-09 14:41:59 +00:00
|
|
|
req, err := http.NewRequest("GET", IndexServerAddress()+"/users/", nil)
|
2013-03-15 00:43:59 +00:00
|
|
|
req.SetBasicAuth(authConfig.Username, authConfig.Password)
|
|
|
|
resp, err := client.Do(req)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
defer resp.Body.Close()
|
|
|
|
body, err := ioutil.ReadAll(resp.Body)
|
|
|
|
if err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
if resp.StatusCode == 200 {
|
2013-06-14 13:38:51 +00:00
|
|
|
status = "Login Succeeded"
|
2013-06-03 12:09:16 +00:00
|
|
|
storeConfig = true
|
2013-05-01 23:36:01 +00:00
|
|
|
} else if resp.StatusCode == 401 {
|
2013-06-03 12:09:16 +00:00
|
|
|
if store {
|
2013-06-14 13:38:51 +00:00
|
|
|
authConfig.Email = ""
|
2013-06-03 12:09:16 +00:00
|
|
|
if err := SaveConfig(authConfig); err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
}
|
2013-05-01 23:36:01 +00:00
|
|
|
return "", fmt.Errorf("Wrong login/password, please try again")
|
2013-03-15 00:43:59 +00:00
|
|
|
} else {
|
2013-05-01 23:36:01 +00:00
|
|
|
return "", fmt.Errorf("Login: %s (Code: %d; Headers: %s)", body,
|
|
|
|
resp.StatusCode, resp.Header)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
|
|
|
} else {
|
2013-04-24 16:11:29 +00:00
|
|
|
return "", fmt.Errorf("Registration: %s", reqBody)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-03-15 01:43:02 +00:00
|
|
|
} else {
|
2013-04-24 16:11:29 +00:00
|
|
|
return "", fmt.Errorf("Unexpected status code [%d] : %s", reqStatusCode, reqBody)
|
2013-03-15 00:43:59 +00:00
|
|
|
}
|
2013-06-03 12:09:16 +00:00
|
|
|
if storeConfig && store {
|
|
|
|
if err := SaveConfig(authConfig); err != nil {
|
|
|
|
return "", err
|
|
|
|
}
|
|
|
|
}
|
2013-03-15 00:43:59 +00:00
|
|
|
return status, nil
|
|
|
|
}
|