public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

GitLab: properly handle token which has Guest only access

pull/8682/head
Stephan Vock 2020-03-11 13:30:48 +01:00
parent 3e82542812
commit 55d252b9c3
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
src/Composer/Repository/Vcs/GitLabDriver.php
View File

@ -427,6 +427,30 @@ class GitLabDriver extends VcsDriver
if ($fetchingRepoData) {
$json = JsonFile::parseJson($res, $url);
// Accessing the API with a token with Guest (10) access will return
// more data than unauthenticated access but no default_branch data
// accessing files via the API will then also fail
if (!isset($json['default_branch']) && isset($json['permissions'])) {
$this->isPrivate = $json['visibility'] !== 'public';
$moreThanGuestAccess = false;
// Check both access levels (e.g. project, group)
// - value will be null if no access is set
// - value will be array with key access_level if set
foreach ($json['permissions'] as $permission) {
if ($permission && $permission['access_level'] > 10) {
$moreThanGuestAccess = true;
}
}
if (!$moreThanGuestAccess) {
$this->io->writeError('<warning>GitLab token with Guest only access detected</warning>');
$this->setupGitDriver($this->generateSshUrl());
return $res;
}
}
// force auth as the unauthenticated version of the API is broken
if (!isset($json['default_branch'])) {
if (!empty($json['id'])) {