1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
package uploadpack
import (
"context"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/githttp"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/commandargs"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/gitauditevent"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/readwriter"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/shared/accessverifier"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/shared/customaction"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/command/shared/disallowedcommand"
"gitlab.com/gitlab-org/gitlab-shell/v14/internal/config"
)
type Command struct {
Config *config.Config
Args *commandargs.Shell
ReadWriter *readwriter.ReadWriter
}
func (c *Command) Execute(ctx context.Context) (context.Context, error) {
args := c.Args.SshArgs
if len(args) != 2 {
return ctx, disallowedcommand.Error
}
repo := args[1]
response, err := c.verifyAccess(ctx, repo)
if err != nil {
return ctx, err
}
logData := command.NewLogData(
response.Gitaly.Repo.GlProjectPath,
response.Username,
)
ctxWithLogData := context.WithValue(ctx, "logData", logData)
if response.IsCustomAction() {
if response.Payload.Data.GeoProxyFetchDirectToPrimary {
cmd := githttp.PullCommand{
Config: c.Config,
ReadWriter: c.ReadWriter,
Response: response,
}
return ctxWithLogData, cmd.Execute(ctx)
}
customAction := customaction.Command{
Config: c.Config,
ReadWriter: c.ReadWriter,
EOFSent: false,
}
return ctxWithLogData, customAction.Execute(ctx, response)
}
stats, err := c.performGitalyCall(ctx, response)
if err != nil {
return ctxWithLogData, err
}
if response.NeedAudit {
gitauditevent.Audit(ctx, c.Args.CommandType, c.Config, response, stats)
}
return ctxWithLogData, nil
}
func (c *Command) verifyAccess(ctx context.Context, repo string) (*accessverifier.Response, error) {
cmd := accessverifier.Command{c.Config, c.Args, c.ReadWriter}
return cmd.Verify(ctx, c.Args.CommandType, repo)
}
|
