drone/app/api/handler/lfs/upload.go
Darko Draskovic 8d7fc35548 fix: [CODE-3014]: Return 401 in case of unauthorized call without auth data (#3634)
* Remove IsAuthErr helper
* Merge remote-tracking branch 'origin/main' into dd/auth
* Fix registry tests
* Add IsAuthErr app api auth package
* Add hasAccess helper method
* Merge remote-tracking branch 'origin/main' into dd/auth
* Merge remote-tracking branch 'origin/main' into dd/auth
* Merge remote-tracking branch 'origin/main' into dd/auth
* Clean up controllers and handle anonymous in Check
* Return 401 in case of unauthorized call without auth data
2025-04-09 15:24:54 +00:00

66 lines
1.9 KiB
Go

// Copyright 2023 Harness, Inc.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package lfs
import (
"errors"
"net/http"
apiauth "github.com/harness/gitness/app/api/auth"
"github.com/harness/gitness/app/api/controller/lfs"
"github.com/harness/gitness/app/api/render"
"github.com/harness/gitness/app/api/request"
"github.com/harness/gitness/app/auth"
"github.com/harness/gitness/app/url"
)
func HandleLFSUpload(controller *lfs.Controller, urlProvider url.Provider) http.HandlerFunc {
return func(w http.ResponseWriter, r *http.Request) {
ctx := r.Context()
session, _ := request.AuthSessionFrom(ctx)
repoRef, err := request.GetRepoRefFromPath(r)
if err != nil {
render.TranslatedUserError(ctx, w, err)
return
}
oid, err := request.GetObjectIDFromQuery(r)
if err != nil {
render.TranslatedUserError(ctx, w, err)
return
}
size, err := request.GetObjectSizeFromQuery(r)
if err != nil {
render.TranslatedUserError(ctx, w, err)
return
}
// apply max byte size from the request body
res, err := controller.Upload(ctx, session, repoRef, lfs.Pointer{OId: oid, Size: size}, r.Body)
if errors.Is(err, apiauth.ErrForbidden) && auth.IsAnonymousSession(session) {
render.GitBasicAuth(ctx, w, urlProvider)
return
}
if err != nil {
render.TranslatedUserError(ctx, w, err)
return
}
render.JSON(w, http.StatusCreated, res)
}
}