2016-07-20 16:41:26 +00:00
|
|
|
class Projects::GitHttpController < Projects::GitHttpClientController
|
2016-11-21 15:31:51 +00:00
|
|
|
include WorkhorseRequest
|
2016-08-19 17:10:41 +00:00
|
|
|
|
2017-05-19 19:58:45 +00:00
|
|
|
before_action :access_check
|
|
|
|
|
|
|
|
rescue_from Gitlab::GitAccess::UnauthorizedError, with: :render_403
|
|
|
|
rescue_from Gitlab::GitAccess::NotFoundError, with: :render_404
|
|
|
|
|
2016-04-22 11:24:53 +00:00
|
|
|
# GET /foo/bar.git/info/refs?service=git-upload-pack (git pull)
|
|
|
|
# GET /foo/bar.git/info/refs?service=git-receive-pack (git push)
|
|
|
|
def info_refs
|
2017-05-19 19:58:45 +00:00
|
|
|
log_user_activity if upload_pack?
|
2016-10-05 14:41:32 +00:00
|
|
|
|
2017-05-19 19:58:45 +00:00
|
|
|
render_ok
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
2016-04-15 10:40:43 +00:00
|
|
|
|
2016-04-22 11:24:53 +00:00
|
|
|
# POST /foo/bar.git/git-upload-pack (git pull)
|
|
|
|
def git_upload_pack
|
2017-05-19 19:58:45 +00:00
|
|
|
render_ok
|
2016-04-22 11:24:53 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
# POST /foo/bar.git/git-receive-pack" (git push)
|
|
|
|
def git_receive_pack
|
2017-05-19 19:58:45 +00:00
|
|
|
render_ok
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
private
|
|
|
|
|
2016-07-20 16:41:26 +00:00
|
|
|
def download_request?
|
|
|
|
upload_pack?
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def upload_pack?
|
2016-04-22 11:24:53 +00:00
|
|
|
git_command == 'git-upload-pack'
|
2016-03-24 17:58:29 +00:00
|
|
|
end
|
|
|
|
|
2016-04-22 11:24:53 +00:00
|
|
|
def git_command
|
2016-03-23 17:34:16 +00:00
|
|
|
if action_name == 'info_refs'
|
2016-03-24 17:58:29 +00:00
|
|
|
params[:service]
|
2016-03-23 17:34:16 +00:00
|
|
|
else
|
2016-06-03 12:57:34 +00:00
|
|
|
action_name.dasherize
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
|
|
|
end
|
2016-04-15 10:40:43 +00:00
|
|
|
|
2016-03-23 17:34:16 +00:00
|
|
|
def render_ok
|
2016-08-19 17:10:41 +00:00
|
|
|
set_workhorse_internal_api_content_type
|
2017-05-03 21:07:54 +00:00
|
|
|
render json: Gitlab::Workhorse.git_http_ok(repository, wiki?, user, action_name)
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
2016-04-15 10:40:43 +00:00
|
|
|
|
2017-05-19 19:58:45 +00:00
|
|
|
def render_403(exception)
|
|
|
|
render plain: exception.message, status: :forbidden
|
2016-06-23 22:37:57 +00:00
|
|
|
end
|
|
|
|
|
2017-05-19 19:58:45 +00:00
|
|
|
def render_404(exception)
|
|
|
|
render plain: exception.message, status: :not_found
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|
2016-03-24 17:58:29 +00:00
|
|
|
|
2016-06-27 16:14:44 +00:00
|
|
|
def access
|
2017-06-16 00:04:17 +00:00
|
|
|
@access ||= access_klass.new(access_actor, project, 'http', authentication_abilities: authentication_abilities, redirected_path: redirected_path)
|
2017-05-16 19:58:46 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def access_actor
|
|
|
|
return user if user
|
|
|
|
return :ci if ci?
|
2016-06-27 16:14:44 +00:00
|
|
|
end
|
|
|
|
|
2016-08-03 12:54:12 +00:00
|
|
|
def access_check
|
|
|
|
# Use the magic string '_any' to indicate we do not know what the
|
|
|
|
# changes are. This is also what gitlab-shell does.
|
2017-05-19 19:58:45 +00:00
|
|
|
access.check(git_command, '_any')
|
2016-03-24 17:58:29 +00:00
|
|
|
end
|
2017-01-24 20:04:45 +00:00
|
|
|
|
|
|
|
def access_klass
|
|
|
|
@access_klass ||= wiki? ? Gitlab::GitAccessWiki : Gitlab::GitAccess
|
|
|
|
end
|
2016-10-05 14:41:32 +00:00
|
|
|
|
|
|
|
def log_user_activity
|
|
|
|
Users::ActivityService.new(user, 'pull').execute
|
|
|
|
end
|
2016-03-23 17:34:16 +00:00
|
|
|
end
|