mirror of
https://codeberg.org/forgejo/forgejo.git
synced 2024-12-29 12:04:17 +00:00
e8186f1c0f
Fixes #19555 Test-Instructions: https://github.com/go-gitea/gitea/pull/21441#issuecomment-1419438000 This PR implements the mapping of user groups provided by OIDC providers to orgs teams in Gitea. The main part is a refactoring of the existing LDAP code to make it usable from different providers. Refactorings: - Moved the router auth code from module to service because of import cycles - Changed some model methods to take a `Context` parameter - Moved the mapping code from LDAP to a common location I've tested it with Keycloak but other providers should work too. The JSON mapping format is the same as for LDAP. ![grafik](https://user-images.githubusercontent.com/1666336/195634392-3fc540fc-b229-4649-99ac-91ae8e19df2d.png) --------- Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
155 lines
4.2 KiB
Go
155 lines
4.2 KiB
Go
// Copyright 2016 The Gogs Authors. All rights reserved.
|
|
// Copyright 2020 The Gitea Authors.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package repo
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"code.gitea.io/gitea/models/organization"
|
|
"code.gitea.io/gitea/models/perm"
|
|
access_model "code.gitea.io/gitea/models/perm/access"
|
|
repo_model "code.gitea.io/gitea/models/repo"
|
|
user_model "code.gitea.io/gitea/models/user"
|
|
"code.gitea.io/gitea/modules/context"
|
|
api "code.gitea.io/gitea/modules/structs"
|
|
"code.gitea.io/gitea/modules/web"
|
|
"code.gitea.io/gitea/routers/api/v1/utils"
|
|
"code.gitea.io/gitea/services/convert"
|
|
repo_service "code.gitea.io/gitea/services/repository"
|
|
)
|
|
|
|
// ListForks list a repository's forks
|
|
func ListForks(ctx *context.APIContext) {
|
|
// swagger:operation GET /repos/{owner}/{repo}/forks repository listForks
|
|
// ---
|
|
// summary: List a repository's forks
|
|
// produces:
|
|
// - application/json
|
|
// parameters:
|
|
// - name: owner
|
|
// in: path
|
|
// description: owner of the repo
|
|
// type: string
|
|
// required: true
|
|
// - name: repo
|
|
// in: path
|
|
// description: name of the repo
|
|
// type: string
|
|
// required: true
|
|
// - name: page
|
|
// in: query
|
|
// description: page number of results to return (1-based)
|
|
// type: integer
|
|
// - name: limit
|
|
// in: query
|
|
// description: page size of results
|
|
// type: integer
|
|
// responses:
|
|
// "200":
|
|
// "$ref": "#/responses/RepositoryList"
|
|
|
|
forks, err := repo_model.GetForks(ctx.Repo.Repository, utils.GetListOptions(ctx))
|
|
if err != nil {
|
|
ctx.Error(http.StatusInternalServerError, "GetForks", err)
|
|
return
|
|
}
|
|
apiForks := make([]*api.Repository, len(forks))
|
|
for i, fork := range forks {
|
|
access, err := access_model.AccessLevel(ctx, ctx.Doer, fork)
|
|
if err != nil {
|
|
ctx.Error(http.StatusInternalServerError, "AccessLevel", err)
|
|
return
|
|
}
|
|
apiForks[i] = convert.ToRepo(ctx, fork, access)
|
|
}
|
|
|
|
ctx.SetTotalCountHeader(int64(ctx.Repo.Repository.NumForks))
|
|
ctx.JSON(http.StatusOK, apiForks)
|
|
}
|
|
|
|
// CreateFork create a fork of a repo
|
|
func CreateFork(ctx *context.APIContext) {
|
|
// swagger:operation POST /repos/{owner}/{repo}/forks repository createFork
|
|
// ---
|
|
// summary: Fork a repository
|
|
// produces:
|
|
// - application/json
|
|
// parameters:
|
|
// - name: owner
|
|
// in: path
|
|
// description: owner of the repo to fork
|
|
// type: string
|
|
// required: true
|
|
// - name: repo
|
|
// in: path
|
|
// description: name of the repo to fork
|
|
// type: string
|
|
// required: true
|
|
// - name: body
|
|
// in: body
|
|
// schema:
|
|
// "$ref": "#/definitions/CreateForkOption"
|
|
// responses:
|
|
// "202":
|
|
// "$ref": "#/responses/Repository"
|
|
// "403":
|
|
// "$ref": "#/responses/forbidden"
|
|
// "409":
|
|
// description: The repository with the same name already exists.
|
|
// "422":
|
|
// "$ref": "#/responses/validationError"
|
|
|
|
form := web.GetForm(ctx).(*api.CreateForkOption)
|
|
repo := ctx.Repo.Repository
|
|
var forker *user_model.User // user/org that will own the fork
|
|
if form.Organization == nil {
|
|
forker = ctx.Doer
|
|
} else {
|
|
org, err := organization.GetOrgByName(ctx, *form.Organization)
|
|
if err != nil {
|
|
if organization.IsErrOrgNotExist(err) {
|
|
ctx.Error(http.StatusUnprocessableEntity, "", err)
|
|
} else {
|
|
ctx.Error(http.StatusInternalServerError, "GetOrgByName", err)
|
|
}
|
|
return
|
|
}
|
|
isMember, err := org.IsOrgMember(ctx.Doer.ID)
|
|
if err != nil {
|
|
ctx.Error(http.StatusInternalServerError, "IsOrgMember", err)
|
|
return
|
|
} else if !isMember {
|
|
ctx.Error(http.StatusForbidden, "isMemberNot", fmt.Sprintf("User is no Member of Organisation '%s'", org.Name))
|
|
return
|
|
}
|
|
forker = org.AsUser()
|
|
}
|
|
|
|
var name string
|
|
if form.Name == nil {
|
|
name = repo.Name
|
|
} else {
|
|
name = *form.Name
|
|
}
|
|
|
|
fork, err := repo_service.ForkRepository(ctx, ctx.Doer, forker, repo_service.ForkRepoOptions{
|
|
BaseRepo: repo,
|
|
Name: name,
|
|
Description: repo.Description,
|
|
})
|
|
if err != nil {
|
|
if repo_model.IsErrReachLimitOfRepo(err) || repo_model.IsErrRepoAlreadyExist(err) {
|
|
ctx.Error(http.StatusConflict, "ForkRepository", err)
|
|
} else {
|
|
ctx.Error(http.StatusInternalServerError, "ForkRepository", err)
|
|
}
|
|
return
|
|
}
|
|
|
|
// TODO change back to 201
|
|
ctx.JSON(http.StatusAccepted, convert.ToRepo(ctx, fork, perm.AccessModeOwner))
|
|
}
|