164 lines
5.4 KiB
PHP
164 lines
5.4 KiB
PHP
<?php
|
|
|
|
/*
|
|
* This file is part of Composer.
|
|
*
|
|
* (c) Nils Adermann <naderman@naderman.de>
|
|
* Jordi Boggiano <j.boggiano@seld.be>
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Composer\Util;
|
|
|
|
use Composer\IO\IOInterface;
|
|
use Composer\Config;
|
|
use Composer\Factory;
|
|
use Composer\Downloader\TransportException;
|
|
use Composer\Json\JsonFile;
|
|
|
|
/**
|
|
* @author Roshan Gautam <roshan.gautam@hotmail.com>
|
|
*/
|
|
class GitLab
|
|
{
|
|
protected $io;
|
|
protected $config;
|
|
protected $process;
|
|
protected $remoteFilesystem;
|
|
|
|
/**
|
|
* Constructor.
|
|
*
|
|
* @param IOInterface $io The IO instance
|
|
* @param Config $config The composer configuration
|
|
* @param ProcessExecutor $process Process instance, injectable for mocking
|
|
* @param RemoteFilesystem $remoteFilesystem Remote Filesystem, injectable for mocking
|
|
*/
|
|
public function __construct(IOInterface $io, Config $config, ProcessExecutor $process = null, RemoteFilesystem $remoteFilesystem = null)
|
|
{
|
|
$this->io = $io;
|
|
$this->config = $config;
|
|
$this->process = $process ?: new ProcessExecutor();
|
|
$this->remoteFilesystem = $remoteFilesystem ?: Factory::createRemoteFilesystem($this->io, $config);
|
|
}
|
|
|
|
/**
|
|
* Attempts to authorize a GitLab domain via OAuth.
|
|
*
|
|
* @param string $originUrl The host this GitLab instance is located at
|
|
*
|
|
* @return bool true on success
|
|
*/
|
|
public function authorizeOAuth($originUrl)
|
|
{
|
|
if (!in_array($originUrl, $this->config->get('gitlab-domains'), true)) {
|
|
return false;
|
|
}
|
|
|
|
// if available use token from git config
|
|
if (0 === $this->process->execute('git config gitlab.accesstoken', $output)) {
|
|
$this->io->setAuthentication($originUrl, trim($output), 'oauth2');
|
|
|
|
return true;
|
|
}
|
|
|
|
// if available use token from composer config
|
|
$authTokens = $this->config->get('gitlab-token');
|
|
|
|
if (isset($authTokens[$originUrl])) {
|
|
$this->io->setAuthentication($originUrl, $authTokens[$originUrl], 'private-token');
|
|
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Authorizes a GitLab domain interactively via OAuth.
|
|
*
|
|
* @param string $scheme Scheme used in the origin URL
|
|
* @param string $originUrl The host this GitLab instance is located at
|
|
* @param string $message The reason this authorization is required
|
|
*
|
|
* @throws \RuntimeException
|
|
* @throws TransportException|\Exception
|
|
*
|
|
* @return bool true on success
|
|
*/
|
|
public function authorizeOAuthInteractively($scheme, $originUrl, $message = null)
|
|
{
|
|
if ($message) {
|
|
$this->io->writeError($message);
|
|
}
|
|
|
|
$this->io->writeError(sprintf('A token will be created and stored in "%s", your password will never be stored', $this->config->getAuthConfigSource()->getName()));
|
|
$this->io->writeError('To revoke access to this token you can visit '.$originUrl.'/profile/applications');
|
|
|
|
$attemptCounter = 0;
|
|
|
|
while ($attemptCounter++ < 5) {
|
|
try {
|
|
$response = $this->createToken($scheme, $originUrl);
|
|
} catch (TransportException $e) {
|
|
// 401 is bad credentials,
|
|
// 403 is max login attempts exceeded
|
|
if (in_array($e->getCode(), array(403, 401))) {
|
|
if (401 === $e->getCode()) {
|
|
$this->io->writeError('Bad credentials.');
|
|
} else {
|
|
$this->io->writeError('Maximum number of login attempts exceeded. Please try again later.');
|
|
}
|
|
|
|
$this->io->writeError('You can also manually create a personal token at '.$scheme.'://'.$originUrl.'/profile/personal_access_tokens');
|
|
$this->io->writeError('Add it using "composer config --global --auth gitlab-token.'.$originUrl.' <token>"');
|
|
|
|
continue;
|
|
}
|
|
|
|
throw $e;
|
|
}
|
|
|
|
$this->io->setAuthentication($originUrl, $response['access_token'], 'oauth2');
|
|
|
|
// store value in user config in auth file
|
|
$this->config->getAuthConfigSource()->addConfigSetting('gitlab-oauth.'.$originUrl, $response['access_token']);
|
|
|
|
return true;
|
|
}
|
|
|
|
throw new \RuntimeException('Invalid GitLab credentials 5 times in a row, aborting.');
|
|
}
|
|
|
|
private function createToken($scheme, $originUrl)
|
|
{
|
|
$username = $this->io->ask('Username: ');
|
|
$password = $this->io->askAndHideAnswer('Password: ');
|
|
|
|
$headers = array('Content-Type: application/x-www-form-urlencoded');
|
|
|
|
$apiUrl = $originUrl;
|
|
$data = http_build_query(array(
|
|
'username' => $username,
|
|
'password' => $password,
|
|
'grant_type' => 'password',
|
|
), null, '&');
|
|
$options = array(
|
|
'retry-auth-failure' => false,
|
|
'http' => array(
|
|
'method' => 'POST',
|
|
'header' => $headers,
|
|
'content' => $data,
|
|
),
|
|
);
|
|
|
|
$json = $this->remoteFilesystem->getContents($originUrl, $scheme.'://'.$apiUrl.'/oauth/token', false, $options);
|
|
|
|
$this->io->writeError('Token successfully created');
|
|
|
|
return JsonFile::parseJson($json);
|
|
}
|
|
}
|