2012-01-28 13:23:17 +00:00
|
|
|
class OmniauthCallbacksController < Devise::OmniauthCallbacksController
|
2012-12-15 00:16:25 +00:00
|
|
|
Gitlab.config.omniauth.providers.each do |provider|
|
2012-09-12 05:23:20 +00:00
|
|
|
define_method provider['name'] do
|
|
|
|
handle_omniauth
|
|
|
|
end
|
|
|
|
end
|
2012-07-16 22:31:28 +00:00
|
|
|
|
|
|
|
# Extend the standard message generation to accept our custom exception
|
|
|
|
def failure_message
|
|
|
|
exception = env["omniauth.error"]
|
2012-07-21 08:04:05 +00:00
|
|
|
error = exception.error_reason if exception.respond_to?(:error_reason)
|
|
|
|
error ||= exception.error if exception.respond_to?(:error)
|
|
|
|
error ||= exception.message if exception.respond_to?(:message)
|
|
|
|
error ||= env["omniauth.error.type"].to_s
|
2012-07-16 22:31:28 +00:00
|
|
|
error.to_s.humanize if error
|
|
|
|
end
|
2012-08-03 15:27:39 +00:00
|
|
|
|
2014-10-13 11:39:54 +00:00
|
|
|
# We only find ourselves here
|
|
|
|
# if the authentication to LDAP was successful.
|
2012-01-28 13:23:17 +00:00
|
|
|
def ldap
|
2014-10-13 11:39:54 +00:00
|
|
|
@user = Gitlab::LDAP::User.new(oauth)
|
|
|
|
@user.save if @user.changed? # will also save new users
|
|
|
|
gl_user = @user.gl_user
|
|
|
|
gl_user.remember_me = true if @user.persisted?
|
2014-06-12 14:01:23 +00:00
|
|
|
|
2014-07-30 07:50:50 +00:00
|
|
|
# Do additional LDAP checks for the user filter and EE features
|
2014-10-13 11:39:54 +00:00
|
|
|
if @user.allowed?
|
|
|
|
sign_in_and_redirect(gl_user)
|
2014-07-30 07:50:50 +00:00
|
|
|
else
|
|
|
|
flash[:alert] = "Access denied for your LDAP account."
|
|
|
|
redirect_to new_user_session_path
|
2014-06-12 14:01:23 +00:00
|
|
|
end
|
2012-01-28 13:23:17 +00:00
|
|
|
end
|
|
|
|
|
2014-06-24 12:16:52 +00:00
|
|
|
def omniauth_error
|
|
|
|
@provider = params[:provider]
|
|
|
|
@error = params[:error]
|
|
|
|
render 'errors/omniauth_error', layout: "errors", status: 422
|
|
|
|
end
|
|
|
|
|
2012-08-03 15:27:39 +00:00
|
|
|
private
|
|
|
|
|
|
|
|
def handle_omniauth
|
|
|
|
if current_user
|
2014-11-25 16:15:30 +00:00
|
|
|
# Add new authentication method
|
|
|
|
current_user.identities.find_or_create_by(extern_uid: oauth['uid'], provider: oauth['provider'])
|
2012-08-03 15:27:39 +00:00
|
|
|
redirect_to profile_path
|
|
|
|
else
|
2014-10-13 11:39:54 +00:00
|
|
|
@user = Gitlab::OAuth::User.new(oauth)
|
2014-10-16 18:08:30 +00:00
|
|
|
@user.save
|
2012-08-03 15:27:39 +00:00
|
|
|
|
2014-10-16 09:46:40 +00:00
|
|
|
# Only allow properly saved users to login.
|
|
|
|
if @user.persisted? && @user.valid?
|
2014-10-13 11:39:54 +00:00
|
|
|
sign_in_and_redirect(@user.gl_user)
|
2014-10-17 10:15:59 +00:00
|
|
|
else
|
|
|
|
error_message =
|
|
|
|
if @user.gl_user.errors.any?
|
|
|
|
@user.gl_user.errors.map do |attribute, message|
|
|
|
|
"#{attribute} #{message}"
|
|
|
|
end.join(", ")
|
|
|
|
else
|
|
|
|
''
|
|
|
|
end
|
|
|
|
|
2014-10-13 11:39:54 +00:00
|
|
|
redirect_to omniauth_error_path(oauth['provider'], error: error_message) and return
|
2012-08-03 15:27:39 +00:00
|
|
|
end
|
|
|
|
end
|
2015-01-12 17:30:52 +00:00
|
|
|
rescue Gitlab::OAuth::ForbiddenAction => e
|
2014-11-27 11:34:39 +00:00
|
|
|
flash[:notice] = e.message
|
2014-10-16 18:08:30 +00:00
|
|
|
redirect_to new_user_session_path
|
2012-08-03 15:27:39 +00:00
|
|
|
end
|
2013-09-03 21:06:29 +00:00
|
|
|
|
|
|
|
def oauth
|
|
|
|
@oauth ||= request.env['omniauth.auth']
|
|
|
|
end
|
2012-01-28 13:23:17 +00:00
|
|
|
end
|