Module: API::Helpers::Packages::BasicAuthHelpers

Extended by:
Gitlab::Utils::Override
Includes:
Constants, Gitlab::Utils::StrongMemoize
Included in:
Maven::BasicAuthHelpers
Defined in:
lib/api/helpers/packages/basic_auth_helpers.rb

Defined Under Namespace

Modules: Constants

Constant Summary

Constants included from Constants

Constants::AUTHENTICATE_REALM_HEADER, Constants::AUTHENTICATE_REALM_NAME

Instance Method Summary collapse

Methods included from Gitlab::Utils::Override

extended, extensions, included, method_added, override, prepended, queue_verification, verify!

Instance Method Details

#authorize!(action, subject = :global, reason = nil) ⇒ Object 



62
63
64
65
66
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 62

def authorize!(action, subject = :global, reason = nil)
  return if can?(current_user, action, subject)

  unauthorized_or! { forbidden!(reason) }
end

#authorized_project_find!(action: :read_project) ⇒ Object 



23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 23

def authorized_project_find!(action: :read_project)
  project = find_project(params[:id])

  return unauthorized_or! { not_found! } unless project

  case action
  when :read_package
    unless can?(current_user, :read_package, project&.packages_policy_subject)
      # guest users can have :read_project but not :read_package
      return forbidden! if can?(current_user, :read_project, project)

      return unauthorized_or! { not_found! }
    end
  else
    return unauthorized_or! { not_found! } unless can?(current_user, action, project)
  end

  project
end

#authorized_user_project(action: :read_project) ⇒ Object 



17
18
19
20
21
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 17

def authorized_user_project(action: :read_project)
  strong_memoize("authorized_user_project_#{action}") do
    authorized_project_find!(action: action)
  end
end

#find_authorized_group!(action: :read_group) ⇒ Object 



43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 43

def find_authorized_group!(action: :read_group)
  strong_memoize_with(:find_authorized_group, action) do
    group = find_group(params[:id])

    subject = case action
              when :read_package_within_public_registries
                group&.packages_policy_subject
              when :read_group
                group
              end

    unless group && can?(current_user, action, subject)
      break unauthorized_or! { not_found! }
    end

    group
  end
end

#unauthorized! ⇒ Object 



73
74
75
76
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 73

def unauthorized!
  header(AUTHENTICATE_REALM_HEADER, AUTHENTICATE_REALM_NAME)
  super
end

#unauthorized_or! ⇒ Object 



68
69
70
 
# File 'lib/api/helpers/packages/basic_auth_helpers.rb', line 68

def unauthorized_or!
  current_user ? yield : unauthorized!
end