Commit f64e5d4a authored by Douwe Maan's avatar Douwe Maan

Write GitlabShell error to stderr.

parent 8f0f6762
...@@ -13,6 +13,9 @@ require_relative '../lib/gitlab_init' ...@@ -13,6 +13,9 @@ require_relative '../lib/gitlab_init'
# #
# #
require File.join(ROOT_PATH, 'lib', 'gitlab_shell') require File.join(ROOT_PATH, 'lib', 'gitlab_shell')
GitlabShell.new.exec
exit if GitlabShell.new.exec
exit 0
else
exit 1
end
...@@ -3,7 +3,9 @@ require 'shellwords' ...@@ -3,7 +3,9 @@ require 'shellwords'
require_relative 'gitlab_net' require_relative 'gitlab_net'
class GitlabShell class GitlabShell
class AccessDeniedError < StandardError; end
class DisallowedCommandError < StandardError; end class DisallowedCommandError < StandardError; end
class InvalidRepositoryPathError < StandardError; end
attr_accessor :key_id, :repo_name, :git_cmd, :repos_path, :repo_name attr_accessor :key_id, :repo_name, :git_cmd, :repos_path, :repo_name
...@@ -15,31 +17,41 @@ class GitlabShell ...@@ -15,31 +17,41 @@ class GitlabShell
end end
def exec def exec
if @origin_cmd unless @origin_cmd
parse_cmd puts "Welcome to GitLab, #{username}!"
return true
end
raise DisallowedCommandError unless git_cmds.include?(@git_cmd) parse_cmd
ENV['GL_ID'] = @key_id raise DisallowedCommandError unless git_cmds.include?(@git_cmd)
access = api.check_access(@git_cmd, @repo_name, @key_id, '_any') ENV['GL_ID'] = @key_id
status = api.check_access(@git_cmd, @repo_name, @key_id, '_any')
if access.allowed? raise AccessDeniedError, status.message unless status.allowed?
process_cmd
else process_cmd
message = "gitlab-shell: Access denied for git command <#{@origin_cmd}> by #{log_username}."
$logger.warn message true
puts access.message
end
else
puts "Welcome to GitLab, #{username}!"
end
rescue GitlabNet::ApiUnreachableError => ex rescue GitlabNet::ApiUnreachableError => ex
puts "Failed to authorize your Git request: internal API unreachable" $stderr.puts "GitLab: Failed to authorize your Git request: internal API unreachable"
false
rescue AccessDeniedError => ex
message = "gitlab-shell: Access denied for git command <#{@origin_cmd}> by #{log_username}."
$logger.warn message
$stderr.puts "GitLab: #{ex.message}"
false
rescue DisallowedCommandError => ex rescue DisallowedCommandError => ex
message = "gitlab-shell: Attempt to execute disallowed command <#{@origin_cmd}> by #{log_username}." message = "gitlab-shell: Attempt to execute disallowed command <#{@origin_cmd}> by #{log_username}."
$logger.warn message $logger.warn message
puts 'Disallowed command'
$stderr.puts "GitLab: Disallowed command"
false
rescue InvalidRepositoryPathError => ex
$stderr.puts "GitLab: Invalid repository path"
false
end end
protected protected
...@@ -125,7 +137,7 @@ class GitlabShell ...@@ -125,7 +137,7 @@ class GitlabShell
if File.absolute_path(full_repo_path) == full_repo_path if File.absolute_path(full_repo_path) == full_repo_path
path path
else else
abort "Wrong repository path" raise InvalidRepositoryPathError
end end
end end
......
...@@ -241,7 +241,7 @@ describe GitlabShell do ...@@ -241,7 +241,7 @@ describe GitlabShell do
before { File.stub(:absolute_path) { 'y' } } before { File.stub(:absolute_path) { 'y' } }
subject { -> { shell.send(:escape_path, 'z') } } subject { -> { shell.send(:escape_path, 'z') } }
it { should raise_error(SystemExit, "Wrong repository path") } it { should raise_error(GitlabShell::InvalidRepositoryPathError) }
end end
def ssh_cmd(cmd) def ssh_cmd(cmd)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment