##// END OF EJS Templates
Added tag v5.2.1 for changeset a05b3b360e52
Added tag v5.2.1 for changeset a05b3b360e52

File last commit:

r5484:aa514264 default
r5555:dcdeb81f stable
Show More
simplehg.py
167 lines | 5.3 KiB | text/x-python | PythonLexer
project: added all source files and assets
r1
copyrights: updated for 2023
r5088 # Copyright (C) 2010-2023 RhodeCode GmbH
project: added all source files and assets
r1 #
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License, version 3
# (only), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
# This program is dual-licensed. If you wish to learn more about the
# RhodeCode Enterprise Edition, including its added features, Support services,
# and proprietary license terms, please see https://rhodecode.com/licenses/
"""
SimpleHG middleware for handling mercurial protocol request
(push/clone etc.). It's implemented with basic auth function
"""
vcs: added logging into VCS middlewares
r753 import logging
python3: fixed urlparse import
r4919 import urllib.parse
middlewares: all porting for python3
r5082 import urllib.request
import urllib.parse
import urllib.error
project: added all source files and assets
r1
from rhodecode.lib import utils
from rhodecode.lib.ext_json import json
from rhodecode.lib.middleware import simplevcs
PATH_INFO: use new method to consistently extract proper PATH_INFO data
r5032 from rhodecode.lib.middleware.utils import get_path_info
project: added all source files and assets
r1
vcs: added logging into VCS middlewares
r753 log = logging.getLogger(__name__)
project: added all source files and assets
r1
class SimpleHg(simplevcs.SimpleVCS):
SCM = 'hg'
def _get_repository_name(self, environ):
"""
Gets repository name out of PATH_INFO header
:param environ: environ where PATH_INFO is stored
"""
PATH_INFO: use new method to consistently extract proper PATH_INFO data
r5032 repo_name = get_path_info(environ)
vcs: handle excessive slashes in from of the repo name path, fixes #5522
r3328 if repo_name and repo_name.startswith('/'):
# remove only the first leading /
repo_name = repo_name[1:]
return repo_name.rstrip('/')
project: added all source files and assets
r1
_ACTION_MAPPING = {
fix: updated command list mapping for mercurial 6.5, after client upgrade a new command can be given which is clonebundles_manifest, we marked it explicit as pull command. Also added few more commands, fixes RCCE-111
r5484 'between': 'pull',
'branches': 'pull',
'branchmap': 'pull',
'capabilities': 'pull',
project: added all source files and assets
r1 'changegroup': 'pull',
'changegroupsubset': 'pull',
fix: updated command list mapping for mercurial 6.5, after client upgrade a new command can be given which is clonebundles_manifest, we marked it explicit as pull command. Also added few more commands, fixes RCCE-111
r5484 'changesetdata': 'pull',
'clonebundles': 'pull',
'clonebundles_manifest': 'pull',
'debugwireargs': 'pull',
'filedata': 'pull',
project: added all source files and assets
r1 'getbundle': 'pull',
mercurial: protocol security updates....
r2724 'heads': 'pull',
'hello': 'pull',
'known': 'pull',
fix: updated command list mapping for mercurial 6.5, after client upgrade a new command can be given which is clonebundles_manifest, we marked it explicit as pull command. Also added few more commands, fixes RCCE-111
r5484 'listkeys': 'pull',
'lookup': 'pull',
'manifestdata': 'pull',
'narrow_widen': 'pull',
'protocaps': 'pull',
'stream_out': 'pull',
mercurial: protocol security updates....
r2724
# largefiles
fix: updated command list mapping for mercurial 6.5, after client upgrade a new command can be given which is clonebundles_manifest, we marked it explicit as pull command. Also added few more commands, fixes RCCE-111
r5484 'getlfile': 'pull',
mercurial: protocol security updates....
r2724 'putlfile': 'push',
'statlfile': 'pull',
'lheads': 'pull',
acl: support evolve subcommands when checking for permissions.
r3229 # evolve
'evoext_obshashrange_v1': 'pull',
'evoext_obshash': 'pull',
'evoext_obshash1': 'pull',
project: added all source files and assets
r1 'unbundle': 'push',
'pushkey': 'push',
}
mercurial: protocol security updates....
r2724 @classmethod
def _get_xarg_headers(cls, environ):
i = 1
chunks = [] # gather chunks stored in multiple 'hgarg_N'
while True:
head = environ.get('HTTP_X_HGARG_{}'.format(i))
if not head:
break
i += 1
python3: fix urllib usage
r4914 chunks.append(urllib.parse.unquote_plus(head))
mercurial: protocol security updates....
r2724 full_arg = ''.join(chunks)
pref = 'cmds='
if full_arg.startswith(pref):
# strip the cmds= header defining our batch commands
full_arg = full_arg[len(pref):]
cmds = full_arg.split(';')
return cmds
@classmethod
def _get_batch_cmd(cls, environ):
"""
Handle batch command send commands. Those are ';' separated commands
sent by batch command that server needs to execute. We need to extract
those, and map them to our ACTION_MAPPING to get all push/pull commands
specified in the batch
"""
default = 'push'
batch_cmds = []
try:
cmds = cls._get_xarg_headers(environ)
for pair in cmds:
parts = pair.split(' ', 1)
if len(parts) != 2:
continue
# entry should be in a format `key ARGS`
cmd, args = parts
action = cls._ACTION_MAPPING.get(cmd, default)
batch_cmds.append(action)
except Exception:
log.exception('Failed to extract batch commands operations')
# in case we failed, (e.g malformed data) assume it's PUSH sub-command
# for safety
return batch_cmds or [default]
project: added all source files and assets
r1 def _get_action(self, environ):
"""
Maps mercurial request commands into a pull or push command.
mercurial: protocol security updates....
r2724 In case of unknown/unexpected data, it returns 'push' to be safe.
project: added all source files and assets
r1
:param environ:
"""
mercurial: protocol security updates....
r2724 default = 'push'
python3: fixed various code issues...
r4973 query = urllib.parse.parse_qs(environ['QUERY_STRING'], keep_blank_values=True)
mercurial: protocol security updates....
r2724
project: added all source files and assets
r1 if 'cmd' in query:
cmd = query['cmd'][0]
mercurial: protocol security updates....
r2724 if cmd == 'batch':
cmds = self._get_batch_cmd(environ)
if 'push' in cmds:
return 'push'
else:
return 'pull'
return self._ACTION_MAPPING.get(cmd, default)
project: added all source files and assets
r1
mercurial: protocol security updates....
r2724 return default
project: added all source files and assets
r1
def _create_wsgi_app(self, repo_path, repo_name, config):
vcs: handle excessive slashes in from of the repo name path, fixes #5522
r3328 return self.scm_app.create_hg_wsgi_app(repo_path, repo_name, config)
project: added all source files and assets
r1
dan
git-lfs: fixed bug #5399 git-lfs application failed to generate HTTPS urls properly.
r3781 def _create_config(self, extras, repo_name, scheme='http'):
project: added all source files and assets
r1 config = utils.make_db_config(repo=repo_name)
config.set('rhodecode', 'RC_SCM_DATA', json.dumps(extras))
return config.serialize()