| @@ -1,464 +0,0 @@ | |||
| // Copyright 2014 The Gogs Authors. All rights reserved. | |||
| // Use of this source code is governed by a MIT-style | |||
| // license that can be found in the LICENSE file. | |||
| package models | |||
| import ( | |||
| "bufio" | |||
| "container/list" | |||
| "fmt" | |||
| "io" | |||
| "os" | |||
| "os/exec" | |||
| "path" | |||
| "strings" | |||
| "github.com/gogits/git" | |||
| "github.com/gogits/gogs/modules/base" | |||
| ) | |||
| // RepoFile represents a file object in git repository. | |||
| type RepoFile struct { | |||
| *git.TreeEntry | |||
| Path string | |||
| Size int64 | |||
| Repo *git.Repository | |||
| Commit *git.Commit | |||
| } | |||
| // LookupBlob returns the content of an object. | |||
| func (file *RepoFile) LookupBlob() (*git.Blob, error) { | |||
| if file.Repo == nil { | |||
| return nil, ErrRepoFileNotLoaded | |||
| } | |||
| return file.Repo.LookupBlob(file.Id) | |||
| } | |||
| // GetBranches returns all branches of given repository. | |||
| func GetBranches(userName, repoName string) ([]string, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| refs, err := repo.AllReferences() | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| brs := make([]string, len(refs)) | |||
| for i, ref := range refs { | |||
| brs[i] = ref.BranchName() | |||
| } | |||
| return brs, nil | |||
| } | |||
| // GetTags returns all tags of given repository. | |||
| func GetTags(userName, repoName string) ([]string, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| refs, err := repo.AllTags() | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| tags := make([]string, len(refs)) | |||
| for i, ref := range refs { | |||
| tags[i] = ref.Name | |||
| } | |||
| return tags, nil | |||
| } | |||
| func IsBranchExist(userName, repoName, branchName string) bool { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return false | |||
| } | |||
| return repo.IsBranchExist(branchName) | |||
| } | |||
| func GetTargetFile(userName, repoName, branchName, commitId, rpath string) (*RepoFile, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| commit, err := repo.GetCommitOfBranch(branchName) | |||
| if err != nil { | |||
| commit, err = repo.GetCommit(commitId) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| } | |||
| parts := strings.Split(path.Clean(rpath), "/") | |||
| var entry *git.TreeEntry | |||
| tree := commit.Tree | |||
| for i, part := range parts { | |||
| if i == len(parts)-1 { | |||
| entry = tree.EntryByName(part) | |||
| if entry == nil { | |||
| return nil, ErrRepoFileNotExist | |||
| } | |||
| } else { | |||
| tree, err = repo.SubTree(tree, part) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| } | |||
| } | |||
| size, err := repo.ObjectSize(entry.Id) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| repoFile := &RepoFile{ | |||
| entry, | |||
| rpath, | |||
| size, | |||
| repo, | |||
| commit, | |||
| } | |||
| return repoFile, nil | |||
| } | |||
| // GetReposFiles returns a list of file object in given directory of repository. | |||
| // func GetReposFilesOfBranch(userName, repoName, branchName, rpath string) ([]*RepoFile, error) { | |||
| // return getReposFiles(userName, repoName, commitId, rpath) | |||
| // } | |||
| // GetReposFiles returns a list of file object in given directory of repository. | |||
| func GetReposFiles(userName, repoName, commitId, rpath string) ([]*RepoFile, error) { | |||
| return getReposFiles(userName, repoName, commitId, rpath) | |||
| } | |||
| func getReposFiles(userName, repoName, commitId string, rpath string) ([]*RepoFile, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| commit, err := repo.GetCommit(commitId) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| var repodirs []*RepoFile | |||
| var repofiles []*RepoFile | |||
| commit.Tree.Walk(func(dirname string, entry *git.TreeEntry) int { | |||
| if dirname == rpath { | |||
| // TODO: size get method shoule be improved | |||
| size, err := repo.ObjectSize(entry.Id) | |||
| if err != nil { | |||
| return 0 | |||
| } | |||
| var cm = commit | |||
| var i int | |||
| for { | |||
| i = i + 1 | |||
| //fmt.Println(".....", i, cm.Id(), cm.ParentCount()) | |||
| if cm.ParentCount() == 0 { | |||
| break | |||
| } else if cm.ParentCount() == 1 { | |||
| pt, _ := repo.SubTree(cm.Parent(0).Tree, dirname) | |||
| if pt == nil { | |||
| break | |||
| } | |||
| pEntry := pt.EntryByName(entry.Name) | |||
| if pEntry == nil || !pEntry.Id.Equal(entry.Id) { | |||
| break | |||
| } else { | |||
| cm = cm.Parent(0) | |||
| } | |||
| } else { | |||
| var emptyCnt = 0 | |||
| var sameIdcnt = 0 | |||
| var lastSameCm *git.Commit | |||
| //fmt.Println(".....", cm.ParentCount()) | |||
| for i := 0; i < cm.ParentCount(); i++ { | |||
| //fmt.Println("parent", i, cm.Parent(i).Id()) | |||
| p := cm.Parent(i) | |||
| pt, _ := repo.SubTree(p.Tree, dirname) | |||
| var pEntry *git.TreeEntry | |||
| if pt != nil { | |||
| pEntry = pt.EntryByName(entry.Name) | |||
| } | |||
| //fmt.Println("pEntry", pEntry) | |||
| if pEntry == nil { | |||
| emptyCnt = emptyCnt + 1 | |||
| if emptyCnt+sameIdcnt == cm.ParentCount() { | |||
| if lastSameCm == nil { | |||
| goto loop | |||
| } else { | |||
| cm = lastSameCm | |||
| break | |||
| } | |||
| } | |||
| } else { | |||
| //fmt.Println(i, "pEntry", pEntry.Id, "entry", entry.Id) | |||
| if !pEntry.Id.Equal(entry.Id) { | |||
| goto loop | |||
| } else { | |||
| lastSameCm = cm.Parent(i) | |||
| sameIdcnt = sameIdcnt + 1 | |||
| if emptyCnt+sameIdcnt == cm.ParentCount() { | |||
| // TODO: now follow the first parent commit? | |||
| cm = lastSameCm | |||
| //fmt.Println("sameId...") | |||
| break | |||
| } | |||
| } | |||
| } | |||
| } | |||
| } | |||
| } | |||
| loop: | |||
| rp := &RepoFile{ | |||
| entry, | |||
| path.Join(dirname, entry.Name), | |||
| size, | |||
| repo, | |||
| cm, | |||
| } | |||
| if entry.IsFile() { | |||
| repofiles = append(repofiles, rp) | |||
| } else if entry.IsDir() { | |||
| repodirs = append(repodirs, rp) | |||
| } | |||
| } | |||
| return 0 | |||
| }) | |||
| return append(repodirs, repofiles...), nil | |||
| } | |||
| func GetCommit(userName, repoName, commitId string) (*git.Commit, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| return repo.GetCommit(commitId) | |||
| } | |||
| // GetCommitsByBranch returns all commits of given branch of repository. | |||
| func GetCommitsByBranch(userName, repoName, branchName string) (*list.List, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| r, err := repo.LookupReference(fmt.Sprintf("refs/heads/%s", branchName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| return r.AllCommits() | |||
| } | |||
| // GetCommitsByCommitId returns all commits of given commitId of repository. | |||
| func GetCommitsByCommitId(userName, repoName, commitId string) (*list.List, error) { | |||
| repo, err := git.OpenRepository(RepoPath(userName, repoName)) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| oid, err := git.NewOidFromString(commitId) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| return repo.CommitsBefore(oid) | |||
| } | |||
| // Diff line types. | |||
| const ( | |||
| DIFF_LINE_PLAIN = iota + 1 | |||
| DIFF_LINE_ADD | |||
| DIFF_LINE_DEL | |||
| DIFF_LINE_SECTION | |||
| ) | |||
| const ( | |||
| DIFF_FILE_ADD = iota + 1 | |||
| DIFF_FILE_CHANGE | |||
| DIFF_FILE_DEL | |||
| ) | |||
| type DiffLine struct { | |||
| LeftIdx int | |||
| RightIdx int | |||
| Type int | |||
| Content string | |||
| } | |||
| func (d DiffLine) GetType() int { | |||
| return d.Type | |||
| } | |||
| type DiffSection struct { | |||
| Name string | |||
| Lines []*DiffLine | |||
| } | |||
| type DiffFile struct { | |||
| Name string | |||
| Addition, Deletion int | |||
| Type int | |||
| Sections []*DiffSection | |||
| } | |||
| type Diff struct { | |||
| TotalAddition, TotalDeletion int | |||
| Files []*DiffFile | |||
| } | |||
| func (diff *Diff) NumFiles() int { | |||
| return len(diff.Files) | |||
| } | |||
| const DIFF_HEAD = "diff --git " | |||
| func ParsePatch(reader io.Reader) (*Diff, error) { | |||
| scanner := bufio.NewScanner(reader) | |||
| var ( | |||
| curFile *DiffFile | |||
| curSection = &DiffSection{ | |||
| Lines: make([]*DiffLine, 0, 10), | |||
| } | |||
| leftLine, rightLine int | |||
| ) | |||
| diff := &Diff{Files: make([]*DiffFile, 0)} | |||
| var i int | |||
| for scanner.Scan() { | |||
| line := scanner.Text() | |||
| // fmt.Println(i, line) | |||
| if strings.HasPrefix(line, "+++ ") || strings.HasPrefix(line, "--- ") { | |||
| continue | |||
| } | |||
| i = i + 1 | |||
| if line == "" { | |||
| continue | |||
| } | |||
| if line[0] == ' ' { | |||
| diffLine := &DiffLine{Type: DIFF_LINE_PLAIN, Content: line, LeftIdx: leftLine, RightIdx: rightLine} | |||
| leftLine++ | |||
| rightLine++ | |||
| curSection.Lines = append(curSection.Lines, diffLine) | |||
| continue | |||
| } else if line[0] == '@' { | |||
| curSection = &DiffSection{} | |||
| curFile.Sections = append(curFile.Sections, curSection) | |||
| ss := strings.Split(line, "@@") | |||
| diffLine := &DiffLine{Type: DIFF_LINE_SECTION, Content: line} | |||
| curSection.Lines = append(curSection.Lines, diffLine) | |||
| // Parse line number. | |||
| ranges := strings.Split(ss[len(ss)-2][1:], " ") | |||
| leftLine, _ = base.StrTo(strings.Split(ranges[0], ",")[0][1:]).Int() | |||
| rightLine, _ = base.StrTo(strings.Split(ranges[1], ",")[0]).Int() | |||
| continue | |||
| } else if line[0] == '+' { | |||
| curFile.Addition++ | |||
| diff.TotalAddition++ | |||
| diffLine := &DiffLine{Type: DIFF_LINE_ADD, Content: line, RightIdx: rightLine} | |||
| rightLine++ | |||
| curSection.Lines = append(curSection.Lines, diffLine) | |||
| continue | |||
| } else if line[0] == '-' { | |||
| curFile.Deletion++ | |||
| diff.TotalDeletion++ | |||
| diffLine := &DiffLine{Type: DIFF_LINE_DEL, Content: line, LeftIdx: leftLine} | |||
| if leftLine > 0 { | |||
| leftLine++ | |||
| } | |||
| curSection.Lines = append(curSection.Lines, diffLine) | |||
| continue | |||
| } | |||
| // Get new file. | |||
| if strings.HasPrefix(line, DIFF_HEAD) { | |||
| fs := strings.Split(line[len(DIFF_HEAD):], " ") | |||
| a := fs[0] | |||
| curFile = &DiffFile{ | |||
| Name: a[strings.Index(a, "/")+1:], | |||
| Type: DIFF_FILE_CHANGE, | |||
| Sections: make([]*DiffSection, 0, 10), | |||
| } | |||
| diff.Files = append(diff.Files, curFile) | |||
| // Check file diff type. | |||
| for scanner.Scan() { | |||
| switch { | |||
| case strings.HasPrefix(scanner.Text(), "new file"): | |||
| curFile.Type = DIFF_FILE_ADD | |||
| case strings.HasPrefix(scanner.Text(), "deleted"): | |||
| curFile.Type = DIFF_FILE_DEL | |||
| case strings.HasPrefix(scanner.Text(), "index"): | |||
| curFile.Type = DIFF_FILE_CHANGE | |||
| } | |||
| if curFile.Type > 0 { | |||
| break | |||
| } | |||
| } | |||
| } | |||
| } | |||
| return diff, nil | |||
| } | |||
| func GetDiff(repoPath, commitid string) (*Diff, error) { | |||
| repo, err := git.OpenRepository(repoPath) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| commit, err := repo.GetCommit(commitid) | |||
| if err != nil { | |||
| return nil, err | |||
| } | |||
| // First commit of repository. | |||
| if commit.ParentCount() == 0 { | |||
| rd, wr := io.Pipe() | |||
| go func() { | |||
| cmd := exec.Command("git", "show", commitid) | |||
| cmd.Dir = repoPath | |||
| cmd.Stdout = wr | |||
| cmd.Stdin = os.Stdin | |||
| cmd.Stderr = os.Stderr | |||
| cmd.Run() | |||
| wr.Close() | |||
| }() | |||
| defer rd.Close() | |||
| return ParsePatch(rd) | |||
| } | |||
| rd, wr := io.Pipe() | |||
| go func() { | |||
| cmd := exec.Command("git", "diff", commit.Parent(0).Oid.String(), commitid) | |||
| cmd.Dir = repoPath | |||
| cmd.Stdout = wr | |||
| cmd.Stdin = os.Stdin | |||
| cmd.Stderr = os.Stderr | |||
| cmd.Run() | |||
| wr.Close() | |||
| }() | |||
| defer rd.Close() | |||
| return ParsePatch(rd) | |||
| } | |||
| @@ -1,233 +0,0 @@ | |||
| // Copyright 2014 Google Inc. All Rights Reserved. | |||
| // | |||
| // Licensed under the Apache License, Version 2.0 (the "License"); | |||
| // you may not use this file except in compliance with the License. | |||
| // You may obtain a copy of the License at | |||
| // | |||
| // http://www.apache.org/licenses/LICENSE-2.0 | |||
| // | |||
| // Unless required by applicable law or agreed to in writing, software | |||
| // distributed under the License is distributed on an "AS IS" BASIS, | |||
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |||
| // See the License for the specific language governing permissions and | |||
| // limitations under the License. | |||
| // Package oauth2 contains Martini handlers to provide | |||
| // user login via an OAuth 2.0 backend. | |||
| package oauth2 | |||
| import ( | |||
| "encoding/json" | |||
| "fmt" | |||
| "net/http" | |||
| "net/url" | |||
| "strings" | |||
| "time" | |||
| "code.google.com/p/goauth2/oauth" | |||
| "github.com/go-martini/martini" | |||
| "github.com/martini-contrib/sessions" | |||
| ) | |||
| const ( | |||
| codeRedirect = 302 | |||
| keyToken = "oauth2_token" | |||
| keyNextPage = "next" | |||
| ) | |||
| var ( | |||
| // Path to handle OAuth 2.0 logins. | |||
| PathLogin = "/login" | |||
| // Path to handle OAuth 2.0 logouts. | |||
| PathLogout = "/logout" | |||
| // Path to handle callback from OAuth 2.0 backend | |||
| // to exchange credentials. | |||
| PathCallback = "/oauth2callback" | |||
| // Path to handle error cases. | |||
| PathError = "/oauth2error" | |||
| ) | |||
| // Represents OAuth2 backend options. | |||
| type Options struct { | |||
| ClientId string | |||
| ClientSecret string | |||
| RedirectURL string | |||
| Scopes []string | |||
| AuthUrl string | |||
| TokenUrl string | |||
| } | |||
| // Represents a container that contains | |||
| // user's OAuth 2.0 access and refresh tokens. | |||
| type Tokens interface { | |||
| Access() string | |||
| Refresh() string | |||
| IsExpired() bool | |||
| ExpiryTime() time.Time | |||
| ExtraData() map[string]string | |||
| } | |||
| type token struct { | |||
| oauth.Token | |||
| } | |||
| func (t *token) ExtraData() map[string]string { | |||
| return t.Extra | |||
| } | |||
| // Returns the access token. | |||
| func (t *token) Access() string { | |||
| return t.AccessToken | |||
| } | |||
| // Returns the refresh token. | |||
| func (t *token) Refresh() string { | |||
| return t.RefreshToken | |||
| } | |||
| // Returns whether the access token is | |||
| // expired or not. | |||
| func (t *token) IsExpired() bool { | |||
| if t == nil { | |||
| return true | |||
| } | |||
| return t.Expired() | |||
| } | |||
| // Returns the expiry time of the user's | |||
| // access token. | |||
| func (t *token) ExpiryTime() time.Time { | |||
| return t.Expiry | |||
| } | |||
| // Formats tokens into string. | |||
| func (t *token) String() string { | |||
| return fmt.Sprintf("tokens: %v", t) | |||
| } | |||
| // Returns a new Google OAuth 2.0 backend endpoint. | |||
| func Google(opts *Options) martini.Handler { | |||
| opts.AuthUrl = "https://accounts.google.com/o/oauth2/auth" | |||
| opts.TokenUrl = "https://accounts.google.com/o/oauth2/token" | |||
| return NewOAuth2Provider(opts) | |||
| } | |||
| // Returns a new Github OAuth 2.0 backend endpoint. | |||
| func Github(opts *Options) martini.Handler { | |||
| opts.AuthUrl = "https://github.com/login/oauth/authorize" | |||
| opts.TokenUrl = "https://github.com/login/oauth/access_token" | |||
| return NewOAuth2Provider(opts) | |||
| } | |||
| func Facebook(opts *Options) martini.Handler { | |||
| opts.AuthUrl = "https://www.facebook.com/dialog/oauth" | |||
| opts.TokenUrl = "https://graph.facebook.com/oauth/access_token" | |||
| return NewOAuth2Provider(opts) | |||
| } | |||
| // Returns a generic OAuth 2.0 backend endpoint. | |||
| func NewOAuth2Provider(opts *Options) martini.Handler { | |||
| config := &oauth.Config{ | |||
| ClientId: opts.ClientId, | |||
| ClientSecret: opts.ClientSecret, | |||
| RedirectURL: opts.RedirectURL, | |||
| Scope: strings.Join(opts.Scopes, " "), | |||
| AuthURL: opts.AuthUrl, | |||
| TokenURL: opts.TokenUrl, | |||
| } | |||
| transport := &oauth.Transport{ | |||
| Config: config, | |||
| Transport: http.DefaultTransport, | |||
| } | |||
| return func(s sessions.Session, c martini.Context, w http.ResponseWriter, r *http.Request) { | |||
| if r.Method == "GET" { | |||
| switch r.URL.Path { | |||
| case PathLogin: | |||
| login(transport, s, w, r) | |||
| case PathLogout: | |||
| logout(transport, s, w, r) | |||
| case PathCallback: | |||
| handleOAuth2Callback(transport, s, w, r) | |||
| } | |||
| } | |||
| tk := unmarshallToken(s) | |||
| if tk != nil { | |||
| // check if the access token is expired | |||
| if tk.IsExpired() && tk.Refresh() == "" { | |||
| s.Delete(keyToken) | |||
| tk = nil | |||
| } | |||
| } | |||
| // Inject tokens. | |||
| c.MapTo(tk, (*Tokens)(nil)) | |||
| } | |||
| } | |||
| // Handler that redirects user to the login page | |||
| // if user is not logged in. | |||
| // Sample usage: | |||
| // m.Get("/login-required", oauth2.LoginRequired, func() ... {}) | |||
| var LoginRequired martini.Handler = func() martini.Handler { | |||
| return func(s sessions.Session, c martini.Context, w http.ResponseWriter, r *http.Request) { | |||
| token := unmarshallToken(s) | |||
| if token == nil || token.IsExpired() { | |||
| next := url.QueryEscape(r.URL.RequestURI()) | |||
| http.Redirect(w, r, PathLogin+"?next="+next, codeRedirect) | |||
| } | |||
| } | |||
| }() | |||
| func login(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { | |||
| next := extractPath(r.URL.Query().Get(keyNextPage)) | |||
| if s.Get(keyToken) == nil { | |||
| // User is not logged in. | |||
| http.Redirect(w, r, t.Config.AuthCodeURL(next), codeRedirect) | |||
| return | |||
| } | |||
| // No need to login, redirect to the next page. | |||
| http.Redirect(w, r, next, codeRedirect) | |||
| } | |||
| func logout(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { | |||
| next := extractPath(r.URL.Query().Get(keyNextPage)) | |||
| s.Delete(keyToken) | |||
| http.Redirect(w, r, next, codeRedirect) | |||
| } | |||
| func handleOAuth2Callback(t *oauth.Transport, s sessions.Session, w http.ResponseWriter, r *http.Request) { | |||
| next := extractPath(r.URL.Query().Get("state")) | |||
| code := r.URL.Query().Get("code") | |||
| tk, err := t.Exchange(code) | |||
| if err != nil { | |||
| // Pass the error message, or allow dev to provide its own | |||
| // error handler. | |||
| http.Redirect(w, r, PathError, codeRedirect) | |||
| return | |||
| } | |||
| // Store the credentials in the session. | |||
| val, _ := json.Marshal(tk) | |||
| s.Set(keyToken, val) | |||
| http.Redirect(w, r, next, codeRedirect) | |||
| } | |||
| func unmarshallToken(s sessions.Session) (t *token) { | |||
| if s.Get(keyToken) == nil { | |||
| return | |||
| } | |||
| data := s.Get(keyToken).([]byte) | |||
| var tk oauth.Token | |||
| json.Unmarshal(data, &tk) | |||
| return &token{tk} | |||
| } | |||
| func extractPath(next string) string { | |||
| n, err := url.Parse(next) | |||
| if err != nil { | |||
| return "/" | |||
| } | |||
| return n.Path | |||
| } | |||
| @@ -1,162 +0,0 @@ | |||
| // Copyright 2014 Google Inc. All Rights Reserved. | |||
| // | |||
| // Licensed under the Apache License, Version 2.0 (the "License"); | |||
| // you may not use this file except in compliance with the License. | |||
| // You may obtain a copy of the License at | |||
| // | |||
| // http://www.apache.org/licenses/LICENSE-2.0 | |||
| // | |||
| // Unless required by applicable law or agreed to in writing, software | |||
| // distributed under the License is distributed on an "AS IS" BASIS, | |||
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |||
| // See the License for the specific language governing permissions and | |||
| // limitations under the License. | |||
| package oauth2 | |||
| import ( | |||
| "net/http" | |||
| "net/http/httptest" | |||
| "testing" | |||
| "github.com/go-martini/martini" | |||
| "github.com/martini-contrib/sessions" | |||
| ) | |||
| func Test_LoginRedirect(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| m := martini.New() | |||
| m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) | |||
| m.Use(Google(&Options{ | |||
| ClientId: "client_id", | |||
| ClientSecret: "client_secret", | |||
| RedirectURL: "refresh_url", | |||
| Scopes: []string{"x", "y"}, | |||
| })) | |||
| r, _ := http.NewRequest("GET", "/login", nil) | |||
| m.ServeHTTP(recorder, r) | |||
| location := recorder.HeaderMap["Location"][0] | |||
| if recorder.Code != 302 { | |||
| t.Errorf("Not being redirected to the auth page.") | |||
| } | |||
| if location != "https://accounts.google.com/o/oauth2/auth?access_type=&approval_prompt=&client_id=client_id&redirect_uri=refresh_url&response_type=code&scope=x+y&state=" { | |||
| t.Errorf("Not being redirected to the right page, %v found", location) | |||
| } | |||
| } | |||
| func Test_LoginRedirectAfterLoginRequired(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| m := martini.Classic() | |||
| m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) | |||
| m.Use(Google(&Options{ | |||
| ClientId: "client_id", | |||
| ClientSecret: "client_secret", | |||
| RedirectURL: "refresh_url", | |||
| Scopes: []string{"x", "y"}, | |||
| })) | |||
| m.Get("/login-required", LoginRequired, func(tokens Tokens) (int, string) { | |||
| return 200, tokens.Access() | |||
| }) | |||
| r, _ := http.NewRequest("GET", "/login-required?key=value", nil) | |||
| m.ServeHTTP(recorder, r) | |||
| location := recorder.HeaderMap["Location"][0] | |||
| if recorder.Code != 302 { | |||
| t.Errorf("Not being redirected to the auth page.") | |||
| } | |||
| if location != "/login?next=%2Flogin-required%3Fkey%3Dvalue" { | |||
| t.Errorf("Not being redirected to the right page, %v found", location) | |||
| } | |||
| } | |||
| func Test_Logout(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| s := sessions.NewCookieStore([]byte("secret123")) | |||
| m := martini.Classic() | |||
| m.Use(sessions.Sessions("my_session", s)) | |||
| m.Use(Google(&Options{ | |||
| // no need to configure | |||
| })) | |||
| m.Get("/", func(s sessions.Session) { | |||
| s.Set(keyToken, "dummy token") | |||
| }) | |||
| m.Get("/get", func(s sessions.Session) { | |||
| if s.Get(keyToken) != nil { | |||
| t.Errorf("User credentials are still kept in the session.") | |||
| } | |||
| }) | |||
| logout, _ := http.NewRequest("GET", "/logout", nil) | |||
| index, _ := http.NewRequest("GET", "/", nil) | |||
| m.ServeHTTP(httptest.NewRecorder(), index) | |||
| m.ServeHTTP(recorder, logout) | |||
| if recorder.Code != 302 { | |||
| t.Errorf("Not being redirected to the next page.") | |||
| } | |||
| } | |||
| func Test_LogoutOnAccessTokenExpiration(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| s := sessions.NewCookieStore([]byte("secret123")) | |||
| m := martini.Classic() | |||
| m.Use(sessions.Sessions("my_session", s)) | |||
| m.Use(Google(&Options{ | |||
| // no need to configure | |||
| })) | |||
| m.Get("/addtoken", func(s sessions.Session) { | |||
| s.Set(keyToken, "dummy token") | |||
| }) | |||
| m.Get("/", func(s sessions.Session) { | |||
| if s.Get(keyToken) != nil { | |||
| t.Errorf("User not logged out although access token is expired.") | |||
| } | |||
| }) | |||
| addtoken, _ := http.NewRequest("GET", "/addtoken", nil) | |||
| index, _ := http.NewRequest("GET", "/", nil) | |||
| m.ServeHTTP(recorder, addtoken) | |||
| m.ServeHTTP(recorder, index) | |||
| } | |||
| func Test_InjectedTokens(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| m := martini.Classic() | |||
| m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) | |||
| m.Use(Google(&Options{ | |||
| // no need to configure | |||
| })) | |||
| m.Get("/", func(tokens Tokens) string { | |||
| return "Hello world!" | |||
| }) | |||
| r, _ := http.NewRequest("GET", "/", nil) | |||
| m.ServeHTTP(recorder, r) | |||
| } | |||
| func Test_LoginRequired(t *testing.T) { | |||
| recorder := httptest.NewRecorder() | |||
| m := martini.Classic() | |||
| m.Use(sessions.Sessions("my_session", sessions.NewCookieStore([]byte("secret123")))) | |||
| m.Use(Google(&Options{ | |||
| // no need to configure | |||
| })) | |||
| m.Get("/", LoginRequired, func(tokens Tokens) string { | |||
| return "Hello world!" | |||
| }) | |||
| r, _ := http.NewRequest("GET", "/", nil) | |||
| m.ServeHTTP(recorder, r) | |||
| if recorder.Code != 302 { | |||
| t.Errorf("Not being redirected to the auth page although user is not logged in.") | |||
| } | |||
| } | |||
| @@ -1,25 +0,0 @@ | |||
| {{template "mail/base.html" .}} | |||
| {{define "title"}} | |||
| {{if eq .Lang "zh-CN"}} | |||
| {{.User.NickName}},重置账户密码 | |||
| {{end}} | |||
| {{if eq .Lang "en-US"}} | |||
| {{.User.NickName}}, reset your password | |||
| {{end}} | |||
| {{end}} | |||
| {{define "body"}} | |||
| {{if eq .Lang "zh-CN"}} | |||
| <p style="margin:0;padding:0 0 9px 0;">点击链接重置密码,{{.ResetPwdCodeLives}} 分钟内有效</p> | |||
| <p style="margin:0;padding:0 0 9px 0;"> | |||
| <a href="{{.AppUrl}}reset/{{.Code}}">{{.AppUrl}}reset/{{.Code}}</a> | |||
| </p> | |||
| <p style="margin:0;padding:0 0 9px 0;">如果链接点击无反应,请复制到浏览器打开。</p> | |||
| {{end}} | |||
| {{if eq .Lang "en-US"}} | |||
| <p style="margin:0;padding:0 0 9px 0;">Please click following link to reset your password in {{.ResetPwdCodeLives}} hours</p> | |||
| <p style="margin:0;padding:0 0 9px 0;"> | |||
| <a href="{{.AppUrl}}reset/{{.Code}}">{{.AppUrl}}reset/{{.Code}}</a> | |||
| </p> | |||
| <p style="margin:0;padding:0 0 9px 0;">Copy and paste it to your browser if it's not working.</p> | |||
| {{end}} | |||
| {{end}} | |||
| @@ -1,36 +0,0 @@ | |||
| {{template "base/head" .}} | |||
| {{template "base/navbar" .}} | |||
| <div id="body" class="container"> | |||
| <form action="/user/activate" method="post" class="form-horizontal card" id="login-card"> | |||
| {{.CsrfTokenHtml}} | |||
| <h3>Activate Your Account</h3> | |||
| {{if .IsActivatePage}} | |||
| {{if .ServiceNotEnabled}} | |||
| <p>Sorry, Register Mail Confirmation has been disabled.</p> | |||
| {{else if .ResendLimited}} | |||
| <p>Sorry, you are sending activation e-mail too frequently, please wait 3 minutes.</p> | |||
| {{else}} | |||
| <p>New confirmation e-mail has been sent to <b>{{.SignedUser.Email}}</b>, please check your inbox within {{.Hours}} hours to complete your registeration.</p> | |||
| <hr/> | |||
| <a href="http://{{Mail2Domain .SignedUser.Email}}" class="btn btn-lg btn-success">Sign in to your e-mail</a> | |||
| {{end}} | |||
| {{else}} | |||
| {{if .IsSendRegisterMail}} | |||
| <p>A confirmation e-mail has been sent to <b>{{.Email}}</b>, please check your inbox within {{.Hours}} hours to complete your registeration.</p> | |||
| <hr/> | |||
| <a href="http://{{Mail2Domain .Email}}" class="btn btn-lg btn-success">Sign in to your e-mail</a> | |||
| {{else if .IsActivateFailed}} | |||
| <p>Sorry, your confirmation code has been exipired or not valid.</p> | |||
| {{else}} | |||
| <p>Hi, {{.SignedUser.Name}}, you have an unconfirmed email address(<b>{{.SignedUser.Email}}</b>). If you haven't received a confirmation e-mail or need to resend a new one, please click botton below.</p> | |||
| <hr/> | |||
| <div class="form-group"> | |||
| <div class="col-md-offset-4 col-md-6"> | |||
| <button type="submit" class="btn btn-lg btn-primary">Click here to resend your active e-mail</button> | |||
| </div> | |||
| </div> | |||
| {{end}} | |||
| {{end}} | |||
| </form> | |||
| </div> | |||
| {{template "base/footer" .}} | |||