2018-09-29 22:34:47 +00:00
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2017-02-14 22:52:02 +00:00
|
|
|
module API
|
|
|
|
module Helpers
|
2017-02-16 00:30:46 +00:00
|
|
|
module Runner
|
2017-02-28 19:25:58 +00:00
|
|
|
JOB_TOKEN_HEADER = 'HTTP_JOB_TOKEN'.freeze
|
2017-02-28 12:29:52 +00:00
|
|
|
JOB_TOKEN_PARAM = :token
|
2017-02-15 17:08:29 +00:00
|
|
|
|
2017-02-14 22:52:02 +00:00
|
|
|
def runner_registration_token_valid?
|
2017-02-16 00:20:17 +00:00
|
|
|
ActiveSupport::SecurityUtils.variable_size_secure_compare(params[:token],
|
2018-02-02 18:39:55 +00:00
|
|
|
Gitlab::CurrentSettings.runners_registration_token)
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
|
2018-02-22 06:03:00 +00:00
|
|
|
def authenticate_runner!
|
|
|
|
forbidden! unless current_runner
|
2017-11-14 09:02:39 +00:00
|
|
|
|
2018-02-22 06:03:00 +00:00
|
|
|
current_runner
|
|
|
|
.update_cached_info(get_runner_details_from_request)
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
|
2018-02-22 06:03:00 +00:00
|
|
|
def get_runner_details_from_request
|
|
|
|
return get_runner_ip unless params['info'].present?
|
|
|
|
|
|
|
|
attributes_for_keys(%w(name version revision platform architecture), params['info'])
|
|
|
|
.merge(get_runner_ip)
|
|
|
|
end
|
2018-01-29 16:21:30 +00:00
|
|
|
|
2018-02-22 06:03:00 +00:00
|
|
|
def get_runner_ip
|
2019-02-24 16:45:00 +00:00
|
|
|
{ ip_address: env["action_dispatch.remote_ip"].to_s || request.ip }
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def current_runner
|
|
|
|
@runner ||= ::Ci::Runner.find_by_token(params[:token].to_s)
|
|
|
|
end
|
2017-02-15 17:08:29 +00:00
|
|
|
|
2017-02-28 11:52:08 +00:00
|
|
|
def validate_job!(job)
|
|
|
|
not_found! unless job
|
|
|
|
|
|
|
|
yield if block_given?
|
|
|
|
|
2017-06-15 12:06:49 +00:00
|
|
|
project = job.project
|
|
|
|
forbidden!('Project has been deleted!') if project.nil? || project.pending_delete?
|
2017-02-28 11:52:08 +00:00
|
|
|
forbidden!('Job has been erased!') if job.erased?
|
|
|
|
end
|
2017-02-28 12:29:52 +00:00
|
|
|
|
2017-03-31 11:56:27 +00:00
|
|
|
def authenticate_job!
|
|
|
|
job = Ci::Build.find_by_id(params[:id])
|
|
|
|
|
2017-02-28 12:29:52 +00:00
|
|
|
validate_job!(job) do
|
|
|
|
forbidden! unless job_token_valid?(job)
|
|
|
|
end
|
2017-03-31 11:56:27 +00:00
|
|
|
|
|
|
|
job
|
2017-02-28 12:29:52 +00:00
|
|
|
end
|
|
|
|
|
|
|
|
def job_token_valid?(job)
|
|
|
|
token = (params[JOB_TOKEN_PARAM] || env[JOB_TOKEN_HEADER]).to_s
|
|
|
|
token && job.valid_token?(token)
|
|
|
|
end
|
2017-02-28 13:27:25 +00:00
|
|
|
|
|
|
|
def max_artifacts_size
|
2018-02-02 18:39:55 +00:00
|
|
|
Gitlab::CurrentSettings.max_artifacts_size.megabytes.to_i
|
2017-02-28 13:27:25 +00:00
|
|
|
end
|
2018-06-07 15:27:26 +00:00
|
|
|
|
|
|
|
def job_forbidden!(job, reason)
|
|
|
|
header 'Job-Status', job.status
|
|
|
|
forbidden!(reason)
|
|
|
|
end
|
2017-02-14 22:52:02 +00:00
|
|
|
end
|
|
|
|
end
|
2017-02-16 00:20:17 +00:00
|
|
|
end
|