gitoria

2.6 KB

1. // sshgate.hl — WHAT THE SSHD CONTAINER ASKS THIS APP (ticket gitoria#7; docker/sshd). Two internal function routes, only for the
2. // container: every request must carry the shared secret (`X-Gitoria-Secret` = GITORIA_SSH_SECRET); without the secret set they
3. // do not exist (404), and a request that came through the public proxy (it carries X-Forwarded-For / X-Real-IP) is refused.
4. // GET /__git/keys?type=<ssh-ed25519>&key=<base64> sshd AuthorizedKeysCommand: the authorized_keys line for a known key
5. // (`restrict,command="gitoria-shell <user id>" <type> <key>`), empty for an unknown one
6. // GET /__git/access?user=<id>&slug=<slug>&write=0|1 gitoria-shell before it starts git: `ok` or 403. Read = every repo (public);
7. // write = the repo's owner only — the same rule as the token on HTTPS (transport.hl)
8. import { Response } from 'hl:http1'
9. import { slugError, repoBySlug } from './repos.hl'
10. import { userRecord } from './users.hl'
11. import { sshSecret, sshEnabled, userOfKey } from './sshkeys.hl'
13. static NL = "
14. "
16. static reply = (status, text) => {
17. return new Response(text, { status = status headers = { 'Content-Type' = 'text/plain; charset=utf-8' 'Cache-Control' = 'no-store' } })
18. }
20. // null when the caller may ask, else the refusing answer
21. static guard = (req) => {
22. if (!sshEnabled) { return reply(404, 'not found' + NL) }
23. if (req.method != 'GET') { return reply(405, 'GET only' + NL) }
24. if (req.headers['x-forwarded-for'] != null || req.headers['x-real-ip'] != null) { return reply(403, 'internal only' + NL) }
25. let given = req.headers['x-gitoria-secret']
26. if (given == null || hlTypeName(given) != 'String' || given != sshSecret) { return reply(403, 'wrong secret' + NL) }
27. return null
28. }
30. static gitKeys = (route, req) => {
31. let no = guard(req)
32. if (no != null) { return no }
33. let q = req.query != null ? req.query : {}
34. let userId = userOfKey(q.type, q.key)
35. if (userId == null || userRecord(userId) == null) { return reply(200, '') }
36. return reply(200, 'restrict,command="/usr/local/bin/gitoria-shell ' + userId + '" ' + q.type + ' ' + q.key + NL)
37. }
39. static gitAccess = (route, req) => {
40. let no = guard(req)
41. if (no != null) { return no }
42. let q = req.query != null ? req.query : {}
43. let slug = q.slug
44. if (slug == null || hlTypeName(slug) != 'String' || slugError(slug) != null) { return reply(404, 'no such repository' + NL) }
45. let repo = repoBySlug(slug)
46. if (repo == null) { return reply(404, 'no such repository' + NL) }
47. if (q.write == '1') {
48. if (userRecord(q.user) == null || repo.owner != q.user) { return reply(403, 'only the owner of this repository can push to it' + NL) }
49. }
50. return reply(200, 'ok' + NL)
51. }