src/applications/diffusion/gitlfs/DiffusionGitLFSAuthenticateWorkflow.php

   1 <?php
   2
   3 final class DiffusionGitLFSAuthenticateWorkflow
   4   extends DiffusionGitSSHWorkflow {
   5
   6   protected function didConstruct() {
   7     $this->setName('git-lfs-authenticate');
   8     $this->setArguments(
   9       array(
  10         array(
  11           'name' => 'argv',
  12           'wildcard' => true,
  13         ),
  14       ));
  15   }
  16
  17   protected function identifyRepository() {
  18     return $this->loadRepositoryWithPath(
  19       $this->getLFSPathArgument(),
  20       PhabricatorRepositoryType::REPOSITORY_TYPE_GIT);
  21   }
  22
  23   private function getLFSPathArgument() {
  24     return $this->getLFSArgument(0);
  25   }
  26
  27   private function getLFSOperationArgument() {
  28     return $this->getLFSArgument(1);
  29   }
  30
  31   private function getLFSArgument($position) {
  32     $args = $this->getArgs();
  33     $argv = $args->getArg('argv');
  34
  35     if (!isset($argv[$position])) {
  36       throw new Exception(
  37         pht(
  38           'Expected `git-lfs-authenticate <path> <operation>`, but received '.
  39           'too few arguments.'));
  40     }
  41
  42     return $argv[$position];
  43   }
  44
  45   protected function executeRepositoryOperations() {
  46     $operation = $this->getLFSOperationArgument();
  47
  48     // NOTE: We aren't checking write access here, even for "upload". The
  49     // HTTP endpoint should be able to do that for us.
  50
  51     switch ($operation) {
  52       case 'upload':
  53       case 'download':
  54         break;
  55       default:
  56         throw new Exception(
  57           pht(
  58             'Git LFS operation "%s" is not supported by this server.',
  59             $operation));
  60     }
  61
  62     $repository = $this->getRepository();
  63
  64     if (!$repository->isGit()) {
  65       throw new Exception(
  66         pht(
  67           'Repository "%s" is not a Git repository. Git LFS is only '.
  68           'supported for Git repositories.',
  69           $repository->getDisplayName()));
  70     }
  71
  72     if (!$repository->canUseGitLFS()) {
  73       throw new Exception(
  74         pht('Git LFS is not enabled for this repository.'));
  75     }
  76
  77     // NOTE: This is usually the same as the default URI (which does not
  78     // need to be specified in the response), but the protocol or domain may
  79     // differ in some situations.
  80
  81     $lfs_uri = $repository->getGitLFSURI('info/lfs');
  82
  83     // Generate a temporary token to allow the user to access LFS over HTTP.
  84     // This works even if normal HTTP repository operations are not available
  85     // on this host, and does not require the user to have a VCS password.
  86
  87     $user = $this->getSSHUser();
  88
  89     $authorization = DiffusionGitLFSTemporaryTokenType::newHTTPAuthorization(
  90       $repository,
  91       $user,
  92       $operation);
  93
  94     $headers = array(
  95       'authorization' => $authorization,
  96     );
  97
  98     $result = array(
  99       'header' => $headers,
 100       'href' => $lfs_uri,
 101     );
 102     $result = phutil_json_encode($result);
 103
 104     $this->writeIO($result);
 105     $this->waitForGitClient();
 106
 107     return 0;
 108   }
 109
 110 }