mirror of
https://git.vectorsigma.ru/public/atlantis.git
synced 2026-07-30 05:48:45 +00:00
acef89adc4
- Re-write tests for azuredevops_client - CircleCI checks should pass - NewAzureDevopsClient() now takes a hostname like NewGithubClient() - Docs include comment about default merge strategy requirements
71 lines
2.8 KiB
Go
71 lines
2.8 KiB
Go
// Copyright 2017 HootSuite Media Inc.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the License);
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an AS IS BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
// Modified hereafter by contributors to runatlantis/atlantis.
|
|
|
|
package server
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"net/http"
|
|
|
|
"github.com/mcdafydd/go-azuredevops/azuredevops"
|
|
)
|
|
|
|
//go:generate pegomock generate -m --use-experimental-model-gen --package mocks -o mocks/mock_azuredevops_request_validator.go AzureDevopsRequestValidator
|
|
|
|
// AzureDevopsRequestValidator handles checking if Azure Devops requests
|
|
// contain a valid Basic authentication username and password.
|
|
type AzureDevopsRequestValidator interface {
|
|
// Validate returns the JSON payload of the request.
|
|
// If both username and password values have a length greater than zero,
|
|
// it checks that the credentials match those configured in Atlantis.
|
|
// If either username or password have a length of zero, the payload is
|
|
// returned without further checking.
|
|
Validate(r *http.Request, user []byte, pass []byte) ([]byte, error)
|
|
}
|
|
|
|
// DefaultAzureDevopsRequestValidator handles checking if Azure Devops
|
|
// requests contain the correct Basic auth username and password.
|
|
type DefaultAzureDevopsRequestValidator struct{}
|
|
|
|
// Validate returns the JSON payload of the request.
|
|
// If secret is not empty, it checks that the request was signed
|
|
// by secret and returns an error if it was not.
|
|
// If secret is empty, it does not check if the request was signed.
|
|
func (d *DefaultAzureDevopsRequestValidator) Validate(r *http.Request, user []byte, pass []byte) ([]byte, error) {
|
|
if len(user) != 0 && len(pass) != 0 {
|
|
return d.validateWithBasicAuth(r, user, pass)
|
|
}
|
|
return d.validateWithoutBasicAuth(r)
|
|
}
|
|
|
|
func (d *DefaultAzureDevopsRequestValidator) validateWithBasicAuth(r *http.Request, user []byte, pass []byte) ([]byte, error) {
|
|
payload, err := azuredevops.ValidatePayload(r, user, pass)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return payload, nil
|
|
}
|
|
|
|
func (d *DefaultAzureDevopsRequestValidator) validateWithoutBasicAuth(r *http.Request) ([]byte, error) {
|
|
ct := r.Header.Get("Content-Type")
|
|
if ct == "application/json" || ct == "application/json; charset=utf-8" {
|
|
payload, err := ioutil.ReadAll(r.Body)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("could not read body: %s", err)
|
|
}
|
|
return payload, nil
|
|
}
|
|
return nil, fmt.Errorf("webhook request has unsupported Content-Type %q", ct)
|
|
}
|