mirror of
https://github.com/coder/coder.git
synced 2025-07-09 11:45:56 +00:00
eec406b739
* Add scaffolding * Move migration * Add endpoints for gitauth * Add configuration files and tests! * Update typesgen * Convert configuration format for git auth * Fix unclosed database conn * Add overriding VS Code configuration * Fix Git screen * Write VS Code special configuration if providers exist * Enable automatic cloning from VS Code * Add tests for gitaskpass * Fix feature visibiliy * Add banner for too many configurations * Fix update loop for oauth token * Jon comments * Add deployment config page
84 lines
2.9 KiB
Go
84 lines
2.9 KiB
Go
package gitauth
|
|
|
|
import (
|
|
"context"
|
|
"net/url"
|
|
"regexp"
|
|
|
|
"golang.org/x/oauth2"
|
|
"golang.org/x/oauth2/github"
|
|
|
|
"github.com/coder/coder/coderd/httpmw"
|
|
"github.com/coder/coder/codersdk"
|
|
)
|
|
|
|
// endpoint contains default SaaS URLs for each Git provider.
|
|
var endpoint = map[codersdk.GitProvider]oauth2.Endpoint{
|
|
codersdk.GitProviderAzureDevops: {
|
|
AuthURL: "https://app.vssps.visualstudio.com/oauth2/authorize",
|
|
TokenURL: "https://app.vssps.visualstudio.com/oauth2/token",
|
|
},
|
|
codersdk.GitProviderBitBucket: {
|
|
AuthURL: "https://bitbucket.org/site/oauth2/authorize",
|
|
TokenURL: "https://bitbucket.org/site/oauth2/access_token",
|
|
},
|
|
codersdk.GitProviderGitLab: {
|
|
AuthURL: "https://gitlab.com/oauth/authorize",
|
|
TokenURL: "https://gitlab.com/oauth/token",
|
|
},
|
|
codersdk.GitProviderGitHub: github.Endpoint,
|
|
}
|
|
|
|
// scope contains defaults for each Git provider.
|
|
var scope = map[codersdk.GitProvider][]string{
|
|
codersdk.GitProviderAzureDevops: {"vso.code_write"},
|
|
codersdk.GitProviderBitBucket: {"repository:write"},
|
|
codersdk.GitProviderGitLab: {"write_repository"},
|
|
codersdk.GitProviderGitHub: {"repo"},
|
|
}
|
|
|
|
// regex provides defaults for each Git provider to
|
|
// match their SaaS host URL. This is configurable by each provider.
|
|
var regex = map[codersdk.GitProvider]*regexp.Regexp{
|
|
codersdk.GitProviderAzureDevops: regexp.MustCompile(`dev\.azure\.com`),
|
|
codersdk.GitProviderBitBucket: regexp.MustCompile(`bitbucket\.org`),
|
|
codersdk.GitProviderGitLab: regexp.MustCompile(`gitlab\.com`),
|
|
codersdk.GitProviderGitHub: regexp.MustCompile(`github\.com`),
|
|
}
|
|
|
|
// newJWTOAuthConfig creates a new OAuth2 config that uses a custom
|
|
// assertion method that works with Azure Devops. See:
|
|
// https://learn.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/oauth?view=azure-devops
|
|
func newJWTOAuthConfig(config *oauth2.Config) httpmw.OAuth2Config {
|
|
return &jwtConfig{config}
|
|
}
|
|
|
|
type jwtConfig struct {
|
|
*oauth2.Config
|
|
}
|
|
|
|
func (c *jwtConfig) AuthCodeURL(state string, opts ...oauth2.AuthCodeOption) string {
|
|
return c.Config.AuthCodeURL(state, append(opts, oauth2.SetAuthURLParam("response_type", "Assertion"))...)
|
|
}
|
|
|
|
func (c *jwtConfig) Exchange(ctx context.Context, code string, opts ...oauth2.AuthCodeOption) (*oauth2.Token, error) {
|
|
v := url.Values{
|
|
"client_assertion_type": {},
|
|
"client_assertion": {c.ClientSecret},
|
|
"assertion": {code},
|
|
"grant_type": {},
|
|
}
|
|
if c.RedirectURL != "" {
|
|
v.Set("redirect_uri", c.RedirectURL)
|
|
}
|
|
return c.Config.Exchange(ctx, code,
|
|
append(opts,
|
|
oauth2.SetAuthURLParam("client_assertion_type", "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"),
|
|
oauth2.SetAuthURLParam("client_assertion", c.ClientSecret),
|
|
oauth2.SetAuthURLParam("assertion", code),
|
|
oauth2.SetAuthURLParam("grant_type", "urn:ietf:params:oauth:grant-type:jwt-bearer"),
|
|
oauth2.SetAuthURLParam("code", ""),
|
|
)...,
|
|
)
|
|
}
|