RepositoryController.cs

Go to the documentation of this file.

using System;
using System.Globalization;
using System.Linq;
using System.Linq.Expressions;
using System.Net;
using System.Reflection;
using System.Threading;
using System.Threading.Tasks;
 
using GitLabApiClient;
 
using Microsoft.AspNetCore.Mvc;
using Microsoft.EntityFrameworkCore;
using Microsoft.Extensions.Logging;
 
using Tgstation.Server.Api;
using Tgstation.Server.Api.Models;
using Tgstation.Server.Api.Models.Request;
using Tgstation.Server.Api.Models.Response;
using Tgstation.Server.Api.Rights;
using Tgstation.Server.Host.Components;
using Tgstation.Server.Host.Components.Repository;
using Tgstation.Server.Host.Database;
using Tgstation.Server.Host.Extensions;
using Tgstation.Server.Host.Jobs;
using Tgstation.Server.Host.Models;
using Tgstation.Server.Host.Security;
using Tgstation.Server.Host.Utils;
using Tgstation.Server.Host.Utils.GitHub;
 
namespace Tgstation.Server.Host.Controllers
{
    [Route(Routes.Repository)]
#pragma warning disable CA1506 // TODO: Decomplexify
    public sealed class RepositoryController : InstanceRequiredController
    {
        readonly ILoggerFactory loggerFactory;
 
        readonly IJobManager jobManager;
 
        readonly IGitRemoteFeaturesFactory gitRemoteFeaturesFactory;
 
        readonly IGitHubClientFactory gitHubClientFactory;
 
        public RepositoryController(
            IDatabaseContext databaseContext,
            IAuthenticationContext authenticationContext,
            ILogger<RepositoryController> logger,
            IInstanceManager instanceManager,
            ILoggerFactory loggerFactory,
            IJobManager jobManager,
            IGitRemoteFeaturesFactory gitRemoteFeaturesFactory,
            IGitHubClientFactory gitHubClientFactory,
            IApiHeadersProvider apiHeaders)
            : base(
                  databaseContext,
                  authenticationContext,
                  logger,
                  instanceManager,
                  apiHeaders)
        {
            this.loggerFactory = loggerFactory ?? throw new ArgumentNullException(nameof(loggerFactory));
            this.jobManager = jobManager ?? throw new ArgumentNullException(nameof(jobManager));
            this.gitRemoteFeaturesFactory = gitRemoteFeaturesFactory ?? throw new ArgumentNullException(nameof(gitRemoteFeaturesFactory));
            this.gitHubClientFactory = gitHubClientFactory ?? throw new ArgumentNullException(nameof(gitHubClientFactory));
        }
 
        [HttpPut]
        [TgsAuthorize(RepositoryRights.SetOrigin)]
        [ProducesResponseType(typeof(RepositoryResponse), 201)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
        public async ValueTask<IActionResult> Create([FromBody] RepositoryCreateRequest model, CancellationToken cancellationToken)
        {
            ArgumentNullException.ThrowIfNull(model);
 
            if (model.Origin == null)
                return BadRequest(ErrorCode.ModelValidationFailure);
 
            if (model.AccessUser == null ^ model.AccessToken == null)
                return BadRequest(ErrorCode.RepoMismatchUserAndAccessToken);
 
            var userRights = (RepositoryRights)AuthenticationContext.GetRight(RightsType.Repository);
            if (((model.AccessUser ?? model.AccessToken) != null && !userRights.HasFlag(RepositoryRights.ChangeCredentials))
                || ((model.CommitterEmail ?? model.CommitterName) != null && !userRights.HasFlag(RepositoryRights.ChangeCommitter)))
                return Forbid();
 
            var currentModel = await DatabaseContext
                .RepositorySettings
                .AsQueryable()
                .Where(x => x.InstanceId == Instance.Id)
                .FirstOrDefaultAsync(cancellationToken);
 
            if (currentModel == default)
                return this.Gone();
 
            currentModel.UpdateSubmodules = model.UpdateSubmodules ?? true;
 
            var earlyOut = await ValidateCredentials(model, model.Origin, cancellationToken);
            if (earlyOut != null)
                return earlyOut;
 
            currentModel.AccessToken = model.AccessToken;
            currentModel.AccessUser = model.AccessUser;
 
            currentModel.CommitterEmail = model.CommitterEmail ?? currentModel.CommitterEmail;
            currentModel.CommitterName = model.CommitterName ?? currentModel.CommitterName;
 
            var cloneBranch = model.Reference;
            var origin = model.Origin;
 
            return await WithComponentInstance(
                async instance =>
                {
                    var repoManager = instance.RepositoryManager;
 
                    if (repoManager.CloneInProgress)
                        return Conflict(new ErrorMessageResponse(ErrorCode.RepoCloning));
 
                    if (repoManager.InUse)
                        return Conflict(new ErrorMessageResponse(ErrorCode.RepoBusy));
 
                    using var repo = await repoManager.LoadRepository(cancellationToken);
 
                    // clone conflict
                    if (repo != null)
                        return Conflict(new ErrorMessageResponse(ErrorCode.RepoExists));
 
                    var description = String.Format(
                            CultureInfo.InvariantCulture,
                            "Clone{1} repository {0}",
                            origin,
                            cloneBranch != null
                                ? $"\"{cloneBranch}\" branch of"
                                : String.Empty);
                    var job = Job.Create(JobCode.RepositoryClone, AuthenticationContext.User, Instance, RepositoryRights.CancelClone);
                    job.Description = description;
                    var api = currentModel.ToApi();
 
                    await DatabaseContext.Save(cancellationToken);
                    await jobManager.RegisterOperation(
                        job,
                        async (core, databaseContextFactory, paramJob, progressReporter, ct) =>
                        {
                            var repoManager = core!.RepositoryManager;
                            using var repos = await repoManager.CloneRepository(
                                origin,
                                cloneBranch,
                                currentModel.AccessUser,
                                currentModel.AccessToken,
                                progressReporter,
                                currentModel.UpdateSubmodules.Value,
                                ct)
                            ?? throw new JobException(ErrorCode.RepoExists);
 
                            var instance = new Models.Instance
                            {
                                Id = Instance.Id,
                            };
                            await databaseContextFactory.UseContext(
                                async databaseContext =>
                                {
                                    databaseContext.Instances.Attach(instance);
                                    if (await PopulateApi(api, repos, databaseContext, instance, ct))
                                        await databaseContext.Save(ct);
                                });
                        },
                        cancellationToken);
 
                    api.Origin = model.Origin;
                    api.Reference = model.Reference;
                    api.ActiveJob = job.ToApi();
 
                    return this.Created(api);
                });
        }
 
        [HttpDelete]
        [TgsAuthorize(RepositoryRights.Delete)]
        [ProducesResponseType(typeof(RepositoryResponse), 202)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
        public async ValueTask<IActionResult> Delete(CancellationToken cancellationToken)
        {
            var currentModel = await DatabaseContext
                .RepositorySettings
                .AsQueryable()
                .Where(x => x.InstanceId == Instance.Id)
                .FirstOrDefaultAsync(cancellationToken);
 
            if (currentModel == default)
                return this.Gone();
 
            currentModel.AccessToken = null;
            currentModel.AccessUser = null;
 
            await DatabaseContext.Save(cancellationToken);
 
            Logger.LogInformation("Instance {instanceId} repository delete initiated by user {userId}", Instance.Id, AuthenticationContext.User.Require(x => x.Id));
 
            var job = Job.Create(JobCode.RepositoryDelete, AuthenticationContext.User, Instance);
            var api = currentModel.ToApi();
            await jobManager.RegisterOperation(
                job,
                (core, databaseContextFactory, paramJob, progressReporter, ct) => core!.RepositoryManager.DeleteRepository(ct),
                cancellationToken);
            api.ActiveJob = job.ToApi();
            return Accepted(api);
        }
 
        [HttpPatch]
        [TgsAuthorize(RepositoryRights.Reclone)]
        [ProducesResponseType(typeof(RepositoryResponse), 202)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
        public async ValueTask<IActionResult> Reclone(CancellationToken cancellationToken)
        {
            var currentModel = await DatabaseContext
                .RepositorySettings
                .AsQueryable()
                .Where(x => x.InstanceId == Instance.Id)
                .FirstOrDefaultAsync(cancellationToken);
 
            if (currentModel == default)
                return this.Gone();
 
            Logger.LogInformation("Instance {instanceId} repository reclone initiated by user {userId}", Instance.Id, AuthenticationContext.User.Require(x => x.Id));
 
            var repositoryUpdater = CreateRepositoryUpdateService(currentModel);
 
            var job = Job.Create(JobCode.RepositoryReclone, AuthenticationContext.User, Instance);
            var api = currentModel.ToApi();
            await jobManager.RegisterOperation(
                job,
                (core, databaseContextFactory, paramJob, progressReporter, ct) => repositoryUpdater.RepositoryRecloneJob(core, databaseContextFactory, progressReporter, ct),
                cancellationToken);
            api.ActiveJob = job.ToApi();
            return Accepted(api);
        }
 
        [HttpGet]
        [TgsAuthorize(RepositoryRights.Read)]
        [ProducesResponseType(typeof(RepositoryResponse), 200)]
        [ProducesResponseType(typeof(RepositoryResponse), 201)]
        [ProducesResponseType(typeof(RepositoryResponse), 410)]
        public async ValueTask<IActionResult> Read(CancellationToken cancellationToken)
        {
            var currentModel = await DatabaseContext
                .RepositorySettings
                .AsQueryable()
                .Where(x => x.InstanceId == Instance.Id)
                .FirstOrDefaultAsync(cancellationToken);
 
            if (currentModel == default)
                return this.Gone();
 
            var api = currentModel.ToApi();
 
            return await WithComponentInstance(
                async instance =>
                {
                    var repoManager = instance.RepositoryManager;
 
                    if (repoManager.CloneInProgress)
                        return Conflict(new ErrorMessageResponse(ErrorCode.RepoCloning));
 
                    if (repoManager.InUse)
                        return Conflict(new ErrorMessageResponse(ErrorCode.RepoBusy));
 
                    using var repo = await repoManager.LoadRepository(cancellationToken);
                    if (repo != null && await PopulateApi(api, repo, DatabaseContext, Instance, cancellationToken))
                    {
                        // user may have fucked with the repo manually, do what we can
                        await DatabaseContext.Save(cancellationToken);
                        return this.Created(api);
                    }
 
                    return Json(api);
                });
        }
 
        [HttpPost]
        [TgsAuthorize(
            RepositoryRights.ChangeAutoUpdateSettings
            | RepositoryRights.ChangeCommitter
            | RepositoryRights.ChangeCredentials
            | RepositoryRights.ChangeTestMergeCommits
            | RepositoryRights.MergePullRequest
            | RepositoryRights.SetReference
            | RepositoryRights.SetSha
            | RepositoryRights.UpdateBranch
            | RepositoryRights.ChangeSubmoduleUpdate)]
        [ProducesResponseType(typeof(RepositoryResponse), 200)]
        [ProducesResponseType(typeof(RepositoryResponse), 202)]
        [ProducesResponseType(typeof(ErrorMessageResponse), 410)]
#pragma warning disable CA1502 // TODO: Decomplexify
        public async ValueTask<IActionResult> Update([FromBody] RepositoryUpdateRequest model, CancellationToken cancellationToken)
#pragma warning restore CA1502
        {
            ArgumentNullException.ThrowIfNull(model);
 
            if (model.AccessUser == null ^ model.AccessToken == null)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoMismatchUserAndAccessToken));
 
            if (model.CheckoutSha != null && model.Reference != null)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoMismatchShaAndReference));
 
            if (model.CheckoutSha != null && model.UpdateFromOrigin == true)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoMismatchShaAndUpdate));
 
            if (model.NewTestMerges?.Any(x => model.NewTestMerges.Any(y => x != y && x.Number == y.Number)) == true)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoDuplicateTestMerge));
 
            if (model.CommitterName?.Length == 0)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoWhitespaceCommitterName));
 
            if (model.CommitterEmail?.Length == 0)
                return BadRequest(new ErrorMessageResponse(ErrorCode.RepoWhitespaceCommitterEmail));
 
            var newTestMerges = model.NewTestMerges != null && model.NewTestMerges.Count > 0;
            var userRights = (RepositoryRights)AuthenticationContext.GetRight(RightsType.Repository);
            if (newTestMerges && !userRights.HasFlag(RepositoryRights.MergePullRequest))
                return Forbid();
 
            var currentModel = await DatabaseContext
                .RepositorySettings
                .AsQueryable()
                .Where(x => x.InstanceId == Instance.Id)
                .FirstOrDefaultAsync(cancellationToken);
 
            if (currentModel == default)
                return this.Gone();
 
            bool CheckModified<T>(Expression<Func<Api.Models.RepositorySettings, T>> expression, RepositoryRights requiredRight)
            {
                var memberSelectorExpression = (MemberExpression)expression.Body;
                var property = (PropertyInfo)memberSelectorExpression.Member;
 
                var newVal = property.GetValue(model);
                if (newVal == null)
                    return false;
                if (!userRights.HasFlag(requiredRight) && property.GetValue(currentModel) != newVal)
                    return true;
 
                property.SetValue(currentModel, newVal);
                return false;
            }
 
            if (CheckModified(x => x.AccessToken, RepositoryRights.ChangeCredentials)
                || CheckModified(x => x.AccessUser, RepositoryRights.ChangeCredentials)
                || CheckModified(x => x.AutoUpdatesKeepTestMerges, RepositoryRights.ChangeAutoUpdateSettings)
                || CheckModified(x => x.AutoUpdatesSynchronize, RepositoryRights.ChangeAutoUpdateSettings)
                || CheckModified(x => x.CommitterEmail, RepositoryRights.ChangeCommitter)
                || CheckModified(x => x.CommitterName, RepositoryRights.ChangeCommitter)
                || CheckModified(x => x.PushTestMergeCommits, RepositoryRights.ChangeTestMergeCommits)
                || CheckModified(x => x.CreateGitHubDeployments, RepositoryRights.ChangeTestMergeCommits)
                || CheckModified(x => x.ShowTestMergeCommitters, RepositoryRights.ChangeTestMergeCommits)
                || CheckModified(x => x.PostTestMergeComment, RepositoryRights.ChangeTestMergeCommits)
                || CheckModified(x => x.UpdateSubmodules, RepositoryRights.ChangeSubmoduleUpdate)
                || (model.UpdateFromOrigin == true && !userRights.HasFlag(RepositoryRights.UpdateBranch))
                || (model.CheckoutSha != null && !userRights.HasFlag(RepositoryRights.SetSha))
                || (model.Reference != null && model.UpdateFromOrigin != true && !userRights.HasFlag(RepositoryRights.SetReference))) // don't care if it's the same reference, we want to forbid them before starting the job
                return Forbid();
 
            if (model.AccessToken?.Length == 0 && model.AccessUser?.Length == 0)
            {
                // setting an empty string clears everything
                currentModel.AccessUser = null;
                currentModel.AccessToken = null;
            }
 
            var canRead = userRights.HasFlag(RepositoryRights.Read);
 
            var api = canRead ? currentModel.ToApi() : new RepositoryResponse();
            if (canRead)
            {
                var earlyOut = await WithComponentInstanceNullable(
                    async instance =>
                    {
                        var repoManager = instance.RepositoryManager;
                        if (repoManager.CloneInProgress)
                            return Conflict(new ErrorMessageResponse(ErrorCode.RepoCloning));
 
                        if (repoManager.InUse)
                            return Conflict(new ErrorMessageResponse(ErrorCode.RepoBusy));
 
                        using var repo = await repoManager.LoadRepository(cancellationToken);
                        if (repo == null)
                            return Conflict(new ErrorMessageResponse(ErrorCode.RepoMissing));
 
                        var credAuthFailure = await ValidateCredentials(model, repo.Origin, cancellationToken);
                        if (credAuthFailure != null)
                            return credAuthFailure;
 
                        await PopulateApi(api, repo, DatabaseContext, Instance, cancellationToken);
 
                        return null;
                    });
 
                if (earlyOut != null)
                    return earlyOut;
            }
 
            // this is just db stuf so stow it away
            await DatabaseContext.Save(cancellationToken);
 
            // format the job description
            string? description = null;
            if (model.UpdateFromOrigin == true)
                if (model.Reference != null)
                    description = String.Format(CultureInfo.InvariantCulture, "Fetch and hard reset repository to origin/{0}", model.Reference);
                else if (model.CheckoutSha != null)
                    description = String.Format(CultureInfo.InvariantCulture, "Fetch and checkout {0} in repository", model.CheckoutSha);
                else
                    description = "Pull current repository reference";
            else if (model.Reference != null || model.CheckoutSha != null)
                description = String.Format(CultureInfo.InvariantCulture, "Checkout repository {0} {1}", model.Reference != null ? "reference" : "SHA", model.Reference ?? model.CheckoutSha);
 
            if (newTestMerges)
                description = String.Format(
                    CultureInfo.InvariantCulture,
                    "{0}est merge(s) {1}{2}",
                    description != null
                        ? String.Format(CultureInfo.InvariantCulture, "{0} and t", description)
                        : "T",
                    String.Join(
                        ", ",
                        model.NewTestMerges!.Select(
                            x => String.Format(
                                CultureInfo.InvariantCulture,
                                "#{0}{1}",
                                x.Number,
                                x.TargetCommitSha != null
                                    ? String.Format(
                                        CultureInfo.InvariantCulture,
                                        " at {0}",
                                        x.TargetCommitSha[..7])
                                    : String.Empty))),
                    description != null
                        ? String.Empty
                        : " in repository");
 
            if (description == null)
                return Json(api); // no git changes
 
            var job = Job.Create(JobCode.RepositoryUpdate, AuthenticationContext.User, Instance, RepositoryRights.CancelPendingChanges);
            job.Description = description;
 
            var repositoryUpdater = CreateRepositoryUpdateService(currentModel);
 
            // Time to access git, do it in a job
            await jobManager.RegisterOperation(
                job,
                (instance, databaseContextFactory, _, progressReporter, jobToken) => repositoryUpdater.RepositoryUpdateJob(model, instance, databaseContextFactory, progressReporter, jobToken),
                cancellationToken);
 
            api.ActiveJob = job.ToApi();
            return Accepted(api);
        }
 
        async ValueTask<bool> PopulateApi(
            RepositoryResponse apiResponse,
            IRepository repository,
            IDatabaseContext databaseContext,
            Models.Instance instance,
            CancellationToken cancellationToken)
        {
            apiResponse.RemoteGitProvider = repository.RemoteGitProvider;
            apiResponse.RemoteRepositoryOwner = repository.RemoteRepositoryOwner;
            apiResponse.RemoteRepositoryName = repository.RemoteRepositoryName;
 
            apiResponse.Origin = repository.Origin;
            apiResponse.Reference = repository.Reference;
 
            // rev info stuff
            var needsDbUpdate = await RepositoryUpdateService.LoadRevisionInformation(
                repository,
                databaseContext,
                Logger,
                instance,
                null,
                newRevInfo => apiResponse.RevisionInformation = newRevInfo.ToApi(),
                cancellationToken);
            return needsDbUpdate;
        }
 
        RepositoryUpdateService CreateRepositoryUpdateService(Models.RepositorySettings currentModel)
            => new(
                currentModel,
                AuthenticationContext.User,
                loggerFactory.CreateLogger<RepositoryUpdateService>(),
                Instance.Require(x => x.Id));
 
        async ValueTask<IActionResult?> ValidateCredentials(Api.Models.RepositorySettings model, Uri origin, CancellationToken cancellationToken)
        {
            if (String.IsNullOrWhiteSpace(model.AccessToken))
                return null;
 
            Logger.LogDebug("Repository access token updated, performing auth check...");
            var remoteFeatures = gitRemoteFeaturesFactory.CreateGitRemoteFeatures(origin);
            switch (remoteFeatures.RemoteGitProvider!.Value)
            {
                case RemoteGitProvider.GitHub:
                    var gitHubClient = await gitHubClientFactory.CreateClientForRepository(
                        model.AccessToken,
                        new RepositoryIdentifier(
                            remoteFeatures.RemoteRepositoryOwner!,
                            remoteFeatures.RemoteRepositoryName!),
                        cancellationToken);
                    if (gitHubClient == null)
                    {
                        return this.StatusCode(HttpStatusCode.FailedDependency, new ErrorMessageResponse(ErrorCode.RemoteApiError)
                        {
                            AdditionalData = "GitHub authentication failed!",
                        });
                    }
 
                    try
                    {
                        string username;
                        if (!model.AccessToken.StartsWith(Api.Models.RepositorySettings.TgsAppPrivateKeyPrefix))
                        {
                            var user = await gitHubClient.User.Current();
                            username = user.Login;
                        }
                        else
                        {
                            // we literally need to app auth again to get the damn bot username
                            var appClient = gitHubClientFactory.CreateAppClient(model.AccessToken)!;
                            var app = await appClient.GitHubApps.GetCurrent();
                            username = app.Name;
                        }
 
                        if (username != model.AccessUser)
                            return Conflict(new ErrorMessageResponse(ErrorCode.RepoTokenUsernameMismatch));
                    }
                    catch (Exception ex)
                    {
                        return this.StatusCode(HttpStatusCode.FailedDependency, new ErrorMessageResponse(ErrorCode.RemoteApiError)
                        {
                            AdditionalData = $"GitHub Authentication Failure: {ex.Message}",
                        });
                    }
 
                    break;
                case RemoteGitProvider.GitLab:
                    // need to abstract this eventually
                    var gitLabClient = new GitLabClient(GitLabRemoteFeatures.GitLabUrl, model.AccessToken);
                    try
                    {
                        var user = await gitLabClient.Users.GetCurrentSessionAsync();
                        if (user.Username != model.AccessUser)
                            return Conflict(new ErrorMessageResponse(ErrorCode.RepoTokenUsernameMismatch));
                    }
                    catch (Exception ex)
                    {
                        return this.StatusCode(HttpStatusCode.FailedDependency, new ErrorMessageResponse(ErrorCode.RemoteApiError)
                        {
                            AdditionalData = $"GitLab Authentication Failure: {ex.Message}",
                        });
                    }
 
                    break;
                case RemoteGitProvider.Unknown:
                default:
                    Logger.LogWarning("RemoteGitProvider is {provider}, no auth check implemented!", remoteFeatures.RemoteGitProvider.Value);
                    break;
            }
 
            return null;
        }
    }
}