203 lines
4.7 KiB
Ruby
203 lines
4.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
module Users
|
|
class BuildService < BaseService
|
|
delegate :user_default_internal_regex_enabled?,
|
|
:user_default_internal_regex_instance,
|
|
to: :'Gitlab::CurrentSettings.current_application_settings'
|
|
|
|
def initialize(current_user, params = {})
|
|
@current_user = current_user
|
|
@params = params.dup
|
|
@identity_params = params.slice(*identity_attributes)
|
|
end
|
|
|
|
def execute(skip_authorization: false)
|
|
@skip_authorization = skip_authorization
|
|
|
|
build_user
|
|
build_identity
|
|
update_canonical_email
|
|
|
|
user
|
|
end
|
|
|
|
private
|
|
|
|
attr_reader :skip_authorization, :identity_params, :user_params, :user
|
|
|
|
def identity_attributes
|
|
[:extern_uid, :provider]
|
|
end
|
|
|
|
def build_user
|
|
if admin?
|
|
admin_build_user
|
|
else
|
|
standard_build_user
|
|
end
|
|
end
|
|
|
|
def admin?
|
|
return false unless current_user
|
|
|
|
current_user.admin?
|
|
end
|
|
|
|
def admin_build_user
|
|
build_user_params_for_admin
|
|
init_user
|
|
password_reset
|
|
end
|
|
|
|
def standard_build_user
|
|
# current_user non admin or nil
|
|
validate_access!
|
|
build_user_params_for_non_admin
|
|
init_user
|
|
end
|
|
|
|
def build_user_params_for_admin
|
|
@user_params = params.slice(*admin_create_params)
|
|
@user_params.merge!(force_random_password: true, password_expires_at: nil) if params[:reset_password]
|
|
end
|
|
|
|
def init_user
|
|
assign_common_user_params
|
|
|
|
@user = User.new(user_params)
|
|
end
|
|
|
|
def assign_common_user_params
|
|
@user_params[:created_by_id] = current_user&.id
|
|
@user_params[:external] = user_external? if set_external_param?
|
|
|
|
@user_params.delete(:user_type) unless project_bot?
|
|
end
|
|
|
|
def set_external_param?
|
|
user_default_internal_regex_enabled? && !user_params.key?(:external)
|
|
end
|
|
|
|
def user_external?
|
|
user_default_internal_regex_instance.match(params[:email]).nil?
|
|
end
|
|
|
|
def project_bot?
|
|
user_params[:user_type]&.to_sym == :project_bot
|
|
end
|
|
|
|
def password_reset
|
|
@reset_token = user.generate_reset_token if params[:reset_password]
|
|
|
|
if user_params[:force_random_password]
|
|
random_password = User.random_password
|
|
@user.password = user.password_confirmation = random_password
|
|
end
|
|
end
|
|
|
|
def validate_access!
|
|
return if skip_authorization
|
|
return if can_create_user?
|
|
|
|
raise Gitlab::Access::AccessDeniedError
|
|
end
|
|
|
|
def can_create_user?
|
|
current_user.nil? && Gitlab::CurrentSettings.allow_signup?
|
|
end
|
|
|
|
def build_user_params_for_non_admin
|
|
allowed_signup_params = signup_params
|
|
allowed_signup_params << :skip_confirmation if allow_caller_to_request_skip_confirmation?
|
|
|
|
@user_params = params.slice(*allowed_signup_params)
|
|
@user_params[:skip_confirmation] = skip_user_confirmation_email_from_setting if assign_skip_confirmation_from_settings?
|
|
@user_params[:name] = fallback_name if use_fallback_name?
|
|
end
|
|
|
|
def allow_caller_to_request_skip_confirmation?
|
|
skip_authorization
|
|
end
|
|
|
|
def assign_skip_confirmation_from_settings?
|
|
user_params[:skip_confirmation].nil?
|
|
end
|
|
|
|
def skip_user_confirmation_email_from_setting
|
|
!Gitlab::CurrentSettings.send_user_confirmation_email
|
|
end
|
|
|
|
def use_fallback_name?
|
|
user_params[:name].blank? && fallback_name.present?
|
|
end
|
|
|
|
def fallback_name
|
|
"#{user_params[:first_name]} #{user_params[:last_name]}"
|
|
end
|
|
|
|
def build_identity
|
|
return if identity_params.empty?
|
|
|
|
user.identities.build(identity_params)
|
|
end
|
|
|
|
def update_canonical_email
|
|
Users::UpdateCanonicalEmailService.new(user: user).execute
|
|
end
|
|
|
|
# Allowed params for creating a user (admins only)
|
|
def admin_create_params
|
|
[
|
|
:access_level,
|
|
:admin,
|
|
:avatar,
|
|
:bio,
|
|
:can_create_group,
|
|
:color_scheme_id,
|
|
:email,
|
|
:external,
|
|
:force_random_password,
|
|
:hide_no_password,
|
|
:hide_no_ssh_key,
|
|
:linkedin,
|
|
:name,
|
|
:password,
|
|
:password_automatically_set,
|
|
:password_expires_at,
|
|
:projects_limit,
|
|
:remember_me,
|
|
:skip_confirmation,
|
|
:skype,
|
|
:theme_id,
|
|
:twitter,
|
|
:username,
|
|
:website_url,
|
|
:private_profile,
|
|
:organization,
|
|
:location,
|
|
:public_email,
|
|
:user_type,
|
|
:note,
|
|
:view_diffs_file_by_file
|
|
]
|
|
end
|
|
|
|
# Allowed params for user signup
|
|
def signup_params
|
|
[
|
|
:email,
|
|
:name,
|
|
:password,
|
|
:password_automatically_set,
|
|
:username,
|
|
:user_type,
|
|
:first_name,
|
|
:last_name
|
|
]
|
|
end
|
|
end
|
|
end
|
|
|
|
Users::BuildService.prepend_mod_with('Users::BuildService')
|