aljaz/gitpear
1
0
Fork 0
mirror of https://github.com/aljazceru/gitpear.git synced 2025-12-17 06:04:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

enable pus honly authenticated mod

Browse Source 
Signed-off-by: dzdidi <deniszalessky@gmail.com>
This commit is contained in:
dzdidi
2024-01-29 09:37:18 +00:00
parent 38f1d53e5d
commit 8a4285bca4
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/rpc.js
View File

@@ -24,10 +24,12 @@ module.exports = class RPC {
rpc.respond('get-repos', async req => await this.getReposHandler(peerInfo.publicKey, req)) rpc.respond('get-repos', async req => await this.getReposHandler(peerInfo.publicKey, req))
rpc.respond('get-refs', async req => await this.getRefsHandler(peerInfo.publicKey, req)) rpc.respond('get-refs', async req => await this.getRefsHandler(peerInfo.publicKey, req))
/* -- PUSH HANDLERS -- */ if (process.env.GIT_PEAR_AUTH) {
rpc.respond('push', async req => await this.pushHandler(peerInfo.publicKey, req)) /* -- PUSH HANDLERS -- */
rpc.respond('f-push', async req => await this.forcePushHandler(peerInfo.publicKey, req)) rpc.respond('push', async req => await this.pushHandler(peerInfo.publicKey, req))
rpc.respond('d-branch', async req => await this.deleteBranchHandler(peerInfo.publicKey, req)) rpc.respond('f-push', async req => await this.forcePushHandler(peerInfo.publicKey, req))
rpc.respond('d-branch', async req => await this.deleteBranchHandler(peerInfo.publicKey, req))
}
this.connections[peerInfo.publicKey] = rpc this.connections[peerInfo.publicKey] = rpc
} }
@@ -63,6 +65,8 @@ module.exports = class RPC {
const { url, repoName, branch, userId } = await this.parseReq(publicKey, req) const { url, repoName, branch, userId } = await this.parseReq(publicKey, req)
const isContributor = acl.getContributors(repoName).includes(userId) const isContributor = acl.getContributors(repoName).includes(userId)
console.error('pushHandler', { url, repoName, branch, userId, isContributor })
if (!isContributor) { if (!isContributor) {
throw new Error('You are not allowed to push to this repo') throw new Error('You are not allowed to push to this repo')
} }