89 lines
2.9 KiB
Ruby
89 lines
2.9 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class Projects::GoogleCloud::BaseController < Projects::ApplicationController
|
|
feature_category :five_minute_production_app
|
|
urgency :low
|
|
|
|
before_action :admin_project_google_cloud!
|
|
before_action :google_oauth2_enabled!
|
|
before_action :feature_flag_enabled!
|
|
|
|
private
|
|
|
|
def admin_project_google_cloud!
|
|
unless can?(current_user, :admin_project_google_cloud, project)
|
|
track_event(:error_invalid_user)
|
|
access_denied!
|
|
end
|
|
end
|
|
|
|
def google_oauth2_enabled!
|
|
config = Gitlab::Auth::OAuth::Provider.config_for('google_oauth2')
|
|
if config.app_id.blank? || config.app_secret.blank?
|
|
track_event(:error_google_oauth2_not_enabled)
|
|
access_denied! 'This GitLab instance not configured for Google Oauth2.'
|
|
end
|
|
end
|
|
|
|
def feature_flag_enabled!
|
|
enabled_for_user = Feature.enabled?(:incubation_5mp_google_cloud, current_user)
|
|
enabled_for_group = Feature.enabled?(:incubation_5mp_google_cloud, project.group)
|
|
enabled_for_project = Feature.enabled?(:incubation_5mp_google_cloud, project)
|
|
feature_is_enabled = enabled_for_user || enabled_for_group || enabled_for_project
|
|
unless feature_is_enabled
|
|
track_event(:error_feature_flag_not_enabled)
|
|
access_denied!
|
|
end
|
|
end
|
|
|
|
def validate_gcp_token!
|
|
is_token_valid = GoogleApi::CloudPlatform::Client.new(token_in_session, nil)
|
|
.validate_token(expires_at_in_session)
|
|
|
|
return if is_token_valid
|
|
|
|
return_url = project_google_cloud_configuration_path(project)
|
|
state = generate_session_key_redirect(request.url, return_url)
|
|
@authorize_url = GoogleApi::CloudPlatform::Client.new(nil,
|
|
callback_google_api_auth_url,
|
|
state: state).authorize_url
|
|
redirect_to @authorize_url
|
|
end
|
|
|
|
def generate_session_key_redirect(uri, error_uri)
|
|
GoogleApi::CloudPlatform::Client.new_session_key_for_redirect_uri do |key|
|
|
session[key] = uri
|
|
session[:error_uri] = error_uri
|
|
end
|
|
end
|
|
|
|
def token_in_session
|
|
session[GoogleApi::CloudPlatform::Client.session_key_for_token]
|
|
end
|
|
|
|
def expires_at_in_session
|
|
session[GoogleApi::CloudPlatform::Client.session_key_for_expires_at]
|
|
end
|
|
|
|
def track_event(action, label = nil)
|
|
Gitlab::Tracking.event(
|
|
self.class.name,
|
|
action.to_s,
|
|
label: label,
|
|
project: project,
|
|
user: current_user
|
|
)
|
|
end
|
|
|
|
def gcp_projects
|
|
google_api_client = GoogleApi::CloudPlatform::Client.new(token_in_session, nil)
|
|
google_api_client.list_projects
|
|
end
|
|
|
|
def refs
|
|
params = { per_page: 50 }
|
|
branches = BranchesFinder.new(project.repository, params).execute(gitaly_pagination: true)
|
|
tags = TagsFinder.new(project.repository, params).execute(gitaly_pagination: true)
|
|
(branches + tags).map(&:name)
|
|
end
|
|
end
|