mirror of
https://gitea.com/gitea/tea.git
synced 2026-10-26 15:13:57 +00:00
bircni
c5f674111a
Reverts #1126, #1125, #1124, #1123 and #1122. `go.mod` keeps the Go 1.26 line with toolchain `go1.26.9` (instead of the original `go1.26.6`) so the security fix from #1131 isn't lost. reopens #69 reopens #141 reopens #162 reopens #172 reopens #197 reopens #232 reopens #240 reopens #246 reopens #323 reopens #325 reopens #326 reopens #328 reopens #344 reopens #351 reopens #373 reopens #403 reopens #406 reopens #417 reopens #430 reopens #457 reopens #480 reopens #482 reopens #489 reopens #490 reopens #498 reopens #500 reopens #504 reopens #510 reopens #516 reopens #523 reopens #556 reopens #560 reopens #569 reopens #571 reopens #602 reopens #632 reopens #633 reopens #643 reopens #666 reopens #670 reopens #672 reopens #677 reopens #683 reopens #697 reopens #726 reopens #737 reopens #770 reopens #779 reopens #804 reopens #817 reopens #831 reopens #833 reopens #834 reopens #908 reopens #966 reopens #1023 reopens #1029 reopens #1032 reopens #1050 reopens #1052 reopens #1069 reopens #1073 reopens #1087 reopens #1091 reopens #1094 reopens #1110 reopens #1115 reopens #1116 reopens #1118 Reviewed-on: https://gitea.com/gitea/tea/pulls/1146 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
71 lines
1.7 KiB
Go
71 lines
1.7 KiB
Go
// Copyright 2020 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package git
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
"os"
|
|
"strings"
|
|
|
|
"gitea.dev/tea/modules/utils"
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
type pwCallback = func(string) (string, error)
|
|
|
|
// GetAuthForURL returns backend-agnostic auth settings for git network operations.
|
|
func GetAuthForURL(remoteURL *url.URL, authToken, keyFile string, passwordCallback pwCallback) (*AuthMethod, error) {
|
|
switch remoteURL.Scheme {
|
|
case "http", "https":
|
|
return &AuthMethod{Scheme: remoteURL.Scheme, Username: authToken}, nil
|
|
case "ssh":
|
|
if keyFile == "" {
|
|
return &AuthMethod{Scheme: remoteURL.Scheme, Username: remoteURL.User.Username()}, nil
|
|
}
|
|
expandedKeyFile, err := utils.AbsPathWithExpansion(keyFile)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
sshKey, err := os.ReadFile(expandedKeyFile)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("can not read ssh key '%s'", expandedKeyFile)
|
|
}
|
|
|
|
auth := &AuthMethod{
|
|
Scheme: remoteURL.Scheme,
|
|
Username: remoteURL.User.Username(),
|
|
KeyFile: expandedKeyFile,
|
|
}
|
|
if _, err := ssh.ParsePrivateKey(sshKey); err == nil {
|
|
return auth, nil
|
|
}
|
|
|
|
if _, ok := err.(*ssh.PassphraseMissingError); ok {
|
|
if passwordCallback == nil {
|
|
return nil, err
|
|
}
|
|
for i := 0; i < 3; i++ {
|
|
pass, err := passwordCallback(expandedKeyFile)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
if _, err := ssh.ParsePrivateKeyWithPassphrase(sshKey, []byte(pass)); err == nil {
|
|
auth.KeyPassphrase = pass
|
|
return auth, nil
|
|
}
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
return nil, err
|
|
default:
|
|
return nil, fmt.Errorf("don't know how to handle url scheme %v", remoteURL.Scheme)
|
|
}
|
|
}
|
|
|
|
func shellQuote(s string) string {
|
|
return "'" + strings.ReplaceAll(s, "'", "'\\''") + "'"
|
|
}
|