| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268 | // Copyright 2014 The Gogs Authors. All rights reserved.// Use of this source code is governed by a MIT-style// license that can be found in the LICENSE file.package middlewareimport (	"errors"	"fmt"	"net/url"	"strings"	"github.com/go-martini/martini"	"github.com/gogits/git"	"github.com/gogits/gogs/models"	"github.com/gogits/gogs/modules/log"	"github.com/gogits/gogs/modules/setting")func RepoAssignment(redirect bool, args ...bool) martini.Handler {	return func(ctx *Context, params martini.Params) {		// valid brachname		var validBranch bool		// display bare quick start if it is a bare repo		var displayBare bool		if len(args) >= 1 {			validBranch = args[0]		}		if len(args) >= 2 {			displayBare = args[1]		}		var (			user        *models.User			err         error			isTrueOwner bool		)		userName := params["username"]		repoName := params["reponame"]		refName := params["branchname"]		// Collaborators who have write access can be seen as owners.		if ctx.IsSigned {			ctx.Repo.IsOwner, err = models.HasAccess(ctx.User.Name, userName+"/"+repoName, models.WRITABLE)			if err != nil {				ctx.Handle(500, "RepoAssignment(HasAccess)", err)				return			}			isTrueOwner = ctx.User.LowerName == strings.ToLower(userName)		}		if !isTrueOwner {			user, err = models.GetUserByName(userName)			if err != nil {				if err == models.ErrUserNotExist {					ctx.Handle(404, "RepoAssignment(GetUserByName)", err)					return				} else if redirect {					ctx.Redirect("/")					return				}				ctx.Handle(500, "RepoAssignment(GetUserByName)", err)				return			}		} else {			user = ctx.User		}		if user == nil {			if redirect {				ctx.Redirect("/")				return			}			ctx.Handle(403, "RepoAssignment", errors.New("invliad user account for single repository"))			return		}		ctx.Repo.Owner = user		// get repository		repo, err := models.GetRepositoryByName(user.Id, repoName)		if err != nil {			if err == models.ErrRepoNotExist {				ctx.Handle(404, "RepoAssignment", err)				return			} else if redirect {				ctx.Redirect("/")				return			}			ctx.Handle(500, "RepoAssignment", err)			return		}		// Check if the mirror repository owner(mirror repository doesn't have access).		if ctx.IsSigned && !ctx.Repo.IsOwner && repo.OwnerId == ctx.User.Id {			ctx.Repo.IsOwner = true		}		// Check access.		if repo.IsPrivate && !ctx.Repo.IsOwner {			if ctx.User == nil {				ctx.Handle(404, "RepoAssignment(HasAccess)", nil)				return			}			hasAccess, err := models.HasAccess(ctx.User.Name, ctx.Repo.Owner.Name+"/"+repo.Name, models.READABLE)			if err != nil {				ctx.Handle(500, "RepoAssignment(HasAccess)", err)				return			} else if !hasAccess {				ctx.Handle(404, "RepoAssignment(HasAccess)", nil)				return			}		}		ctx.Repo.HasAccess = true		ctx.Data["HasAccess"] = true		if repo.IsMirror {			ctx.Repo.Mirror, err = models.GetMirror(repo.Id)			if err != nil {				ctx.Handle(500, "RepoAssignment(GetMirror)", err)				return			}			ctx.Data["MirrorInterval"] = ctx.Repo.Mirror.Interval		}		repo.NumOpenIssues = repo.NumIssues - repo.NumClosedIssues		repo.NumOpenMilestones = repo.NumMilestones - repo.NumClosedMilestones		ctx.Repo.Repository = repo		ctx.Data["IsBareRepo"] = ctx.Repo.Repository.IsBare		gitRepo, err := git.OpenRepository(models.RepoPath(userName, repoName))		if err != nil {			ctx.Handle(500, "RepoAssignment Invalid repo "+models.RepoPath(userName, repoName), err)			return		}		ctx.Repo.GitRepo = gitRepo		ctx.Repo.RepoLink = "/" + user.Name + "/" + repo.Name		tags, err := ctx.Repo.GitRepo.GetTags()		if err != nil {			ctx.Handle(500, "RepoAssignment(GetTags))", err)			return		}		ctx.Repo.Repository.NumTags = len(tags)		ctx.Data["Title"] = user.Name + "/" + repo.Name		ctx.Data["Repository"] = repo		ctx.Data["Owner"] = user		ctx.Data["RepoLink"] = ctx.Repo.RepoLink		ctx.Data["IsRepositoryOwner"] = ctx.Repo.IsOwner		ctx.Data["BranchName"] = ""		if setting.SshPort != 22 {			ctx.Repo.CloneLink.SSH = fmt.Sprintf("ssh://%s@%s/%s/%s.git", setting.RunUser, setting.Domain, user.LowerName, repo.LowerName)		} else {			ctx.Repo.CloneLink.SSH = fmt.Sprintf("%s@%s:%s/%s.git", setting.RunUser, setting.Domain, user.LowerName, repo.LowerName)		}		ctx.Repo.CloneLink.HTTPS = fmt.Sprintf("%s%s/%s.git", setting.AppUrl, user.LowerName, repo.LowerName)		ctx.Data["CloneLink"] = ctx.Repo.CloneLink		if ctx.Repo.Repository.IsGoget {			ctx.Data["GoGetLink"] = fmt.Sprintf("%s%s/%s", setting.AppUrl, user.LowerName, repo.LowerName)			ctx.Data["GoGetImport"] = fmt.Sprintf("%s/%s/%s", setting.Domain, user.LowerName, repo.LowerName)		}		// when repo is bare, not valid branch		if !ctx.Repo.Repository.IsBare && validBranch {		detect:			if len(refName) > 0 {				if gitRepo.IsBranchExist(refName) {					ctx.Repo.IsBranch = true					ctx.Repo.BranchName = refName					ctx.Repo.Commit, err = gitRepo.GetCommitOfBranch(refName)					if err != nil {						ctx.Handle(404, "RepoAssignment invalid branch", nil)						return					}					ctx.Repo.CommitId = ctx.Repo.Commit.Id.String()				} else if gitRepo.IsTagExist(refName) {					ctx.Repo.IsBranch = true					ctx.Repo.BranchName = refName					ctx.Repo.Commit, err = gitRepo.GetCommitOfTag(refName)					if err != nil {						ctx.Handle(404, "RepoAssignment invalid tag", nil)						return					}					ctx.Repo.CommitId = ctx.Repo.Commit.Id.String()				} else if len(refName) == 40 {					ctx.Repo.IsCommit = true					ctx.Repo.CommitId = refName					ctx.Repo.BranchName = refName					ctx.Repo.Commit, err = gitRepo.GetCommit(refName)					if err != nil {						ctx.Handle(404, "RepoAssignment invalid commit", nil)						return					}				} else {					ctx.Handle(404, "RepoAssignment invalid repo", nil)					return				}			} else {				if len(refName) == 0 {					if gitRepo.IsBranchExist(ctx.Repo.Repository.DefaultBranch) {						refName = ctx.Repo.Repository.DefaultBranch					} else {						brs, err := gitRepo.GetBranches()						if err != nil {							ctx.Handle(500, "RepoAssignment(GetBranches))", err)							return						}						refName = brs[0]					}				}				goto detect			}			ctx.Data["IsBranch"] = ctx.Repo.IsBranch			ctx.Data["IsCommit"] = ctx.Repo.IsCommit		}		log.Debug("displayBare: %v; IsBare: %v", displayBare, ctx.Repo.Repository.IsBare)		// repo is bare and display enable		if displayBare && ctx.Repo.Repository.IsBare {			log.Debug("Bare repository: %s", ctx.Repo.RepoLink)			ctx.HTML(200, "repo/single_bare")			return		}		if ctx.IsSigned {			ctx.Repo.IsWatching = models.IsWatching(ctx.User.Id, repo.Id)		}		ctx.Data["BranchName"] = ctx.Repo.BranchName		brs, err := ctx.Repo.GitRepo.GetBranches()		if err != nil {			log.Error("RepoAssignment(GetBranches): %v", err)		}		ctx.Data["Branches"] = brs		ctx.Data["CommitId"] = ctx.Repo.CommitId		ctx.Data["IsRepositoryWatching"] = ctx.Repo.IsWatching	}}func RequireOwner() martini.Handler {	return func(ctx *Context) {		if !ctx.Repo.IsOwner {			if !ctx.IsSigned {				ctx.SetCookie("redirect_to", "/"+url.QueryEscape(ctx.Req.RequestURI))				ctx.Redirect("/user/login")				return			}			ctx.Handle(404, ctx.Req.RequestURI, nil)			return		}	}}
 |