mirror of
https://github.com/go-gitea/gitea.git
synced 2026-11-09 17:37:20 -06:00
8cb6fb2001
Several code paths skipped checks that their siblings already perform. - Code comment replies are rejected when they target a review of another pull request or another user's pending review - OAuth2 refuses tokens for users who can't sign in, and introspection reports their tokens and already used refresh tokens as inactive - AGit proc-receive runs the same pull request permission and wiki checks as pre-receive - Repository transfer drops the repository's owner-level scoped workflow source registrations, and registrations whose source the owner no longer owns are ignored - The web editor's base branch copy into a fork and the fork's upstream divergence info require read access to the base repository - LFS downloads require sign-in under strict `REQUIRE_SIGNIN_VIEW`, like git smart HTTP - Unknown AGit target branches are reported as an unexpected ref again
51 lines
1.6 KiB
Go
51 lines
1.6 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package private
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"slices"
|
|
|
|
issues_model "gitea.dev/models/issues"
|
|
user_model "gitea.dev/models/user"
|
|
"gitea.dev/modules/git"
|
|
"gitea.dev/modules/private"
|
|
"gitea.dev/modules/web"
|
|
"gitea.dev/services/agit"
|
|
gitea_context "gitea.dev/services/context"
|
|
)
|
|
|
|
// HookProcReceive proc-receive hook - only handles agit Proc-Receive requests at present
|
|
func HookProcReceive(ctx *gitea_context.PrivateContext) {
|
|
opts := web.GetForm[*private.HookOptions](ctx)
|
|
if !loadContextDoerPermission(ctx, opts.UserID, opts.UserExtDoerData) ||
|
|
(slices.ContainsFunc(opts.RefFullNames, git.RefName.IsFor) && !assertCanCreatePullRequest(ctx, opts)) {
|
|
return
|
|
}
|
|
|
|
results, err := agit.ProcReceive(ctx, ctx.Repo.Repository, ctx.Repo.GitRepo, &agit.ProcReceiveOptions{
|
|
OldCommitIDs: opts.OldCommitIDs,
|
|
NewCommitIDs: opts.NewCommitIDs,
|
|
RefFullNames: opts.RefFullNames,
|
|
GitPushOptions: opts.GitPushOptions,
|
|
Doer: ctx.Doer,
|
|
})
|
|
if err != nil {
|
|
if errors.Is(err, issues_model.ErrMustCollaborator) {
|
|
ctx.PrivateUserErrorf(http.StatusUnauthorized, "You must be a collaborator to create pull request.")
|
|
} else if errors.Is(err, user_model.ErrBlockedUser) {
|
|
ctx.PrivateUserErrorf(http.StatusUnauthorized, "Cannot create pull request because you are blocked by the repository owner.")
|
|
} else {
|
|
ctx.PrivateInternalErrorf("agit.ProcReceive failed: %v", err)
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
ctx.JSON(http.StatusOK, private.HookProcReceiveResult{
|
|
Results: results,
|
|
})
|
|
}
|