1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
# frozen_string_literal: true
module UserSettings
class PersonalAccessTokensController < ApplicationController
include RenderAccessTokens
include FeedTokenHelper
feature_category :system_access
before_action :check_personal_access_tokens_enabled
prepend_before_action(only: [:index]) { authenticate_sessionless_user!(:ics) }
def index
set_index_vars
unless params[:scopes].nil?
scopes = []
# An over engineered solution to generate scopes array without extra object allocations
params[:scopes].split(",", Gitlab::Auth.all_available_scopes.count + 1) do |scope|
scope = scope.squish
next if scope.empty?
scope = scope.to_sym
next if Gitlab::Auth.all_available_scopes.exclude?(scope)
scopes << scope
end
end
@personal_access_token = finder.build(
name: params[:name],
scopes: scopes
)
respond_to do |format|
format.html
format.json do
render json: @active_access_tokens
end
format.ics do
if params[:feed_token]
response.headers['Content-Type'] = 'text/plain'
render plain: expiry_ics(@active_access_tokens)
else
redirect_to "#{request.path}?feed_token=#{generate_feed_token_with_path(:ics, request.path)}"
end
end
end
end
def create
result = ::PersonalAccessTokens::CreateService.new(
current_user: current_user,
target_user: current_user,
organization_id: Current.organization_id,
params: personal_access_token_params,
concatenate_errors: false
).execute
@personal_access_token = result.payload[:personal_access_token]
if result.success?
tokens, size = active_access_tokens
render json: { new_token: @personal_access_token.token,
active_access_tokens: tokens, total: size }, status: :ok
else
render json: { errors: result.errors }, status: :unprocessable_entity
end
end
def revoke
@personal_access_token = finder.find(params[:id])
service = PersonalAccessTokens::RevokeService.new(current_user, token: @personal_access_token).execute
service.success? ? flash[:notice] = service.message : flash[:alert] = service.message
redirect_to user_settings_personal_access_tokens_path
end
def rotate
token = finder.find(params[:id])
result = PersonalAccessTokens::RotateService.new(current_user, token, nil, keep_token_lifetime: true).execute
@personal_access_token = result.payload[:personal_access_token]
if result.success?
tokens, size = active_access_tokens
render json: { new_token: @personal_access_token.token,
active_access_tokens: tokens, total: size }, status: :ok
else
render json: { message: result.message }, status: :unprocessable_entity
end
end
private
def finder(options = {})
PersonalAccessTokensFinder.new({ user: current_user, impersonation: false }.merge(options))
end
def personal_access_token_params
params.require(:personal_access_token).permit(:name, :expires_at, scopes: [])
end
def set_index_vars
@scopes = Gitlab::Auth.available_scopes_for(current_user)
@active_access_tokens, @active_access_tokens_size = active_access_tokens
end
def represent(tokens)
::PersonalAccessTokenSerializer.new.represent(tokens)
end
def check_personal_access_tokens_enabled
render_404 if Gitlab::CurrentSettings.personal_access_tokens_disabled?
end
end
end
UserSettings::PersonalAccessTokensController.prepend_mod
|
