gitlab-org--gitlab-foss/lib/api/files.rb

module API
  # Projects API
  class Files < Grape::API
    before { authenticate! }

    helpers do
      def commit_params(attrs)
        {
          file_path: attrs[:file_path],
          source_branch: attrs[:branch_name],
          target_branch: attrs[:branch_name],
          commit_message: attrs[:commit_message],
          file_content: attrs[:content],
          file_content_encoding: attrs[:encoding],
          author_email: attrs[:author_email],
          author_name: attrs[:author_name]
        }
      end

      def commit_response(attrs)
        {
          file_path: attrs[:file_path],
          branch_name: attrs[:branch_name]
        }
      end

      params :simple_file_params do
        requires :file_path, type: String, desc: 'The path to new file. Ex. lib/class.rb'
        requires :branch_name, type: String, desc: 'The name of branch'
        requires :commit_message, type: String, desc: 'Commit Message'
        optional :author_email, type: String, desc: 'The email of the author'
        optional :author_name, type: String, desc: 'The name of the author'
      end

      params :extended_file_params do
        use :simple_file_params
        requires :content, type: String, desc: 'File content'
        optional :encoding, type: String, values: %w[base64], desc: 'File encoding'
      end
    end

    params do
      requires :id, type: String, desc: 'The project ID'
    end
    resource :projects do
      desc 'Get a file from repository'
      params do
        requires :file_path, type: String, desc: 'The path to the file. Ex. lib/class.rb'
        requires :ref, type: String, desc: 'The name of branch, tag, or commit'
      end
      get ":id/repository/files" do
        authorize! :download_code, user_project

        commit = user_project.commit(params[:ref])
        not_found!('Commit') unless commit

        repo = user_project.repository
        blob = repo.blob_at(commit.sha, params[:file_path])
        not_found!('File') unless blob

        blob.load_all_data!(repo)
        status(200)

        {
          file_name: blob.name,
          file_path: blob.path,
          size: blob.size,
          encoding: "base64",
          content: Base64.strict_encode64(blob.data),
          ref: params[:ref],
          blob_id: blob.id,
          commit_id: commit.id,
          last_commit_id: repo.last_commit_for_path(commit.sha, params[:file_path]).id
        }
      end

      desc 'Create new file in repository'
      params do
        use :extended_file_params
      end
      post ":id/repository/files" do
        authorize! :push_code, user_project

        file_params = declared_params(include_missing: false)
        result = ::Files::CreateService.new(user_project, current_user, commit_params(file_params)).execute

        if result[:status] == :success
          status(201)
          commit_response(file_params)
        else
          render_api_error!(result[:message], 400)
        end
      end

      desc 'Update existing file in repository'
      params do
        use :extended_file_params
      end
      put ":id/repository/files" do
        authorize! :push_code, user_project

        file_params = declared_params(include_missing: false)
        result = ::Files::UpdateService.new(user_project, current_user, commit_params(file_params)).execute

        if result[:status] == :success
          status(200)
          commit_response(file_params)
        else
          http_status = result[:http_status] || 400
          render_api_error!(result[:message], http_status)
        end
      end

      desc 'Delete an existing file in repository'
      params do
        use :simple_file_params
      end
      delete ":id/repository/files" do
        authorize! :push_code, user_project

        file_params = declared_params(include_missing: false)
        result = ::Files::DeleteService.new(user_project, current_user, commit_params(file_params)).execute

        if result[:status] == :success
          status(200)
          commit_response(file_params)
        else
          render_api_error!(result[:message], 400)
        end
      end
    end
  end
end