blob: e7c93a0b924f338abee7b18c9260bd44bf02e102 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
# encoding: utf-8
#--
# Copyright (C) 2009 Nokia Corporation and/or its subsidiary(-ies)
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#++
require "open-uri"
require 'cgi'
module Gitorious
module SSH
class PreReceiveGuard
# env is a Hash representing ENV
def initialize(env, git_spec)
@env = env.dup
@query_url = @env['GITORIOUS_WRITABLE_BY_URL']
@git_spec = git_spec
end
attr_reader :git_spec
# extract the target, eg. refs/heads/master
def git_target
@git_spec.split(/\s/, 3).last.chomp
end
def local_connection?
!@env.include? 'SSH_ORIGINAL_COMMAND'
end
def merge_request_update?
git_target =~ /^refs\/merge-requests\/\d+$/
end
def authentication_url
@query_url + "&git_path=#{CGI.escape(git_target)}"
end
def allow_push?
return true if local_connection?
result = get_via_http(authentication_url)
return result == 'true'
end
def deny_force_pushes?
return false if local_connection?
return false if merge_request_update?
@env['GITORIOUS_DENY_FORCE_PUSHES'] == "true"
end
def get_via_http(url)
open(url).read
end
def gitorious_says(msg)
$stderr.puts
$stderr.puts "== Gitorious: " + ("=" * 59)
$stderr.puts msg
$stderr.puts "="*72
$stderr.puts
end
def null_sha?(sha)
sha == "0000000000000000000000000000000000000000"
end
def deny_merge_request_update_with_sha?(sha)
return null_sha?(sha) && merge_request_update? && !local_connection?
end
end
end
end
|
