| | |
| | | */ |
| | | package com.gitblit.git; |
| | | |
| | | import java.io.File; |
| | | import java.io.IOException; |
| | | import java.text.MessageFormat; |
| | | |
| | |
| | | |
| | | import org.eclipse.jgit.errors.RepositoryNotFoundException; |
| | | import org.eclipse.jgit.lib.Repository; |
| | | import org.eclipse.jgit.transport.DaemonClient; |
| | | import org.eclipse.jgit.transport.resolver.FileResolver; |
| | | import org.eclipse.jgit.transport.resolver.ServiceNotEnabledException; |
| | | import org.slf4j.Logger; |
| | | import org.slf4j.LoggerFactory; |
| | | |
| | | import com.gitblit.GitBlit; |
| | | import com.gitblit.manager.IRepositoryManager; |
| | | import com.gitblit.manager.ISessionManager; |
| | | import com.gitblit.models.RepositoryModel; |
| | | import com.gitblit.models.UserModel; |
| | | |
| | | /** |
| | | * Resolves repositories and grants export access. |
| | | * |
| | | * |
| | | * @author James Moger |
| | | * |
| | | */ |
| | | public class RepositoryResolver<X> extends FileResolver<X> { |
| | | |
| | | private final Logger logger = LoggerFactory.getLogger(RepositoryResolver.class); |
| | | |
| | | public RepositoryResolver(File repositoriesFolder) { |
| | | super(repositoriesFolder, true); |
| | | |
| | | private final ISessionManager sessionManager; |
| | | |
| | | private final IRepositoryManager repositoryManager; |
| | | |
| | | public RepositoryResolver( |
| | | ISessionManager sessionManager, |
| | | IRepositoryManager repositoryManager) { |
| | | |
| | | super(repositoryManager.getRepositoriesFolder(), true); |
| | | this.sessionManager = sessionManager; |
| | | this.repositoryManager = repositoryManager; |
| | | } |
| | | |
| | | /** |
| | |
| | | public Repository open(final X req, final String name) |
| | | throws RepositoryNotFoundException, ServiceNotEnabledException { |
| | | Repository repo = super.open(req, name); |
| | | // XXX Set repository name for the pack factories |
| | | |
| | | // Set repository name for the pack factories |
| | | // We do this because the JGit API does not have a consistent way to |
| | | // retrieve the repository name from the pack factories or the hooks. |
| | | repo.getConfig().setString("gitblit", null, "repositoryName", name); |
| | | if (req instanceof HttpServletRequest) { |
| | | // http/https request |
| | | HttpServletRequest client = (HttpServletRequest) req; |
| | | client.setAttribute("gitblitRepositoryName", name); |
| | | } else if (req instanceof GitDaemonClient) { |
| | | // git request |
| | | GitDaemonClient client = (GitDaemonClient) req; |
| | | client.setRepositoryName(name); |
| | | } |
| | | return repo; |
| | | } |
| | | |
| | | |
| | | /** |
| | | * Check if this repository can be served by the requested client connection. |
| | | */ |
| | | @Override |
| | | protected boolean isExportOk(X req, String repositoryName, Repository db) throws IOException { |
| | | RepositoryModel model = GitBlit.self().getRepositoryModel(repositoryName); |
| | | RepositoryModel model = repositoryManager.getRepositoryModel(repositoryName); |
| | | |
| | | String scheme = null; |
| | | UserModel user = null; |
| | | String origin = null; |
| | | |
| | | if (req instanceof DaemonClient) { |
| | | |
| | | if (req instanceof GitDaemonClient) { |
| | | // git daemon request |
| | | // this is an anonymous/unauthenticated protocol |
| | | DaemonClient client = (DaemonClient) req; |
| | | GitDaemonClient client = (GitDaemonClient) req; |
| | | scheme = "git"; |
| | | origin = client.getRemoteAddress().toString(); |
| | | user = UserModel.ANONYMOUS; |
| | | } else if (req instanceof HttpServletRequest) { |
| | | // http/https request |
| | | HttpServletRequest httpRequest = (HttpServletRequest) req; |
| | | scheme = httpRequest.getScheme(); |
| | | scheme = httpRequest.getScheme(); |
| | | origin = httpRequest.getRemoteAddr(); |
| | | user = GitBlit.self().authenticate(httpRequest); |
| | | user = sessionManager.authenticate(httpRequest); |
| | | if (user == null) { |
| | | user = UserModel.ANONYMOUS; |
| | | } |
| | |
| | | scheme, repositoryName, user.username, origin)); |
| | | return true; |
| | | } |
| | | |
| | | |
| | | // user can not access this git repo |
| | | logger.warn(MessageFormat.format("{0}:// access of {1} by {2} from {3} DENIED", |
| | | scheme, repositoryName, user.username, origin)); |