mirror of
https://github.com/harness/drone.git
synced 2025-05-07 01:09:21 +08:00
3ba0f75c8d
This change adds the following:
- Space UID + Custom harness validation (accountId for top level space, harness identifier for child spaces)
- Repo UID + Custom harness validation (harness identifier)
- Store Unique casing of space / repo path and add Path.ValueUnique (with Unique index) to allow for application layer controlling the case sensitivity (case insensitive standalone vs partially case sensitive harness)
- Token UID (unique index over ownertype + ownerID + tokenUID)
- Add DisplayName for principals (replaces Name to avoid confustion)
- Store Unique casing of principal UID and add Principal.ValueUnique (with unique index) to allow for application layer, per principal type control of case sensitivity (required in embedded mode)
- Generate serviceAccount UID (+Email) Randomly (sa-{space|repo}-{ID}-{random}) - Allows to have a unique UID across all principals while reducing likelyhood of overlaps with users + avoid overlap across spaces / repos.
- Sync casing of space names (accountId orgId projectId) when creating spaces on the fly (to ensure case sensitivity of - harness code) or use the existing space to update casing.
- Update serviceaccount client to match updated NG Manager API
- in embedded mode create spaces for harness resources owning the service account
88 lines
1.9 KiB
Go
88 lines
1.9 KiB
Go
// Copyright 2022 Harness Inc. All rights reserved.
|
|
// Use of this source code is governed by the Polyform Free Trial License
|
|
// that can be found in the LICENSE.md file for this repository.
|
|
|
|
package user
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"os"
|
|
"text/template"
|
|
"time"
|
|
|
|
"github.com/harness/gitness/client"
|
|
|
|
"github.com/harness/gitness/internal/api/controller/user"
|
|
"github.com/harness/gitness/types/enum"
|
|
|
|
"github.com/drone/funcmap"
|
|
"gopkg.in/alecthomas/kingpin.v2"
|
|
)
|
|
|
|
const tokenTmpl = `
|
|
principalID: {{ .Token.PrincipalID }}
|
|
uid: {{ .Token.UID }}
|
|
expiresAt: {{ .Token.ExpiresAt }}
|
|
token: {{ .AccessToken }}
|
|
` //#nosec G101
|
|
|
|
type createPATCommand struct {
|
|
client client.Client
|
|
uid string
|
|
lifetimeInS int64
|
|
|
|
json bool
|
|
tmpl string
|
|
}
|
|
|
|
func (c *createPATCommand) run(*kingpin.ParseContext) error {
|
|
ctx, cancel := context.WithTimeout(context.Background(), time.Minute)
|
|
defer cancel()
|
|
|
|
in := user.CreateTokenInput{
|
|
UID: c.uid,
|
|
Lifetime: time.Duration(int64(time.Second) * c.lifetimeInS),
|
|
Grants: enum.AccessGrantAll,
|
|
}
|
|
|
|
tokenResp, err := c.client.UserCreatePAT(ctx, in)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if c.json {
|
|
enc := json.NewEncoder(os.Stdout)
|
|
enc.SetIndent("", " ")
|
|
return enc.Encode(tokenResp)
|
|
}
|
|
tmpl, err := template.New("_").Funcs(funcmap.Funcs).Parse(c.tmpl)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return tmpl.Execute(os.Stdout, tokenResp)
|
|
}
|
|
|
|
// Register the command.
|
|
func registerCreatePAT(app *kingpin.CmdClause, client client.Client) {
|
|
c := &createPATCommand{
|
|
client: client,
|
|
}
|
|
|
|
cmd := app.Command("pat", "create personal access token").
|
|
Action(c.run)
|
|
|
|
cmd.Arg("uid", "the uid of the token").
|
|
Required().StringVar(&c.uid)
|
|
|
|
cmd.Arg("lifetime", "the lifetime of the token in seconds").
|
|
Required().Int64Var(&c.lifetimeInS)
|
|
|
|
cmd.Flag("json", "json encode the output").
|
|
BoolVar(&c.json)
|
|
|
|
cmd.Flag("format", "format the output using a Go template").
|
|
Default(tokenTmpl).
|
|
Hidden().
|
|
StringVar(&c.tmpl)
|
|
}
|