1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
package main
import (
"flag"
"fmt"
"log"
"net/http"
"time"
"git.ofmax.li/go-git-server/internal/admin"
"git.ofmax.li/go-git-server/internal/authz"
"git.ofmax.li/go-git-server/internal/git"
)
var (
reposDir string
mgmtRepo bool
backendCommand string
addr string
modelPath string
policyPath string
serverConfigPath string
newToken bool
)
func main() {
flag.Parse()
print(reposDir)
if newToken {
token, hash, err := authz.GenerateNewToken()
if err != nil {
log.Fatal(err)
}
fmt.Printf("token: %s\nhash: %s\n", token, hash)
return
}
adminSvc := admin.NewService(modelPath, policyPath, serverConfigPath, reposDir, mgmtRepo)
adminSvc.InitServer()
tokens := authz.NewTokenMap()
err := tokens.LoadTokensFromFile("./tokens.csv")
if err != nil {
log.Fatal(err)
}
router := http.NewServeMux()
// TODO we don't want to use a global
// de-reference args
router.Handle("/mgmt/", admin.Hooks(adminSvc, git.GitHttpBackendHandler(reposDir, backendCommand)))
router.Handle("/", git.GitHttpBackendHandler(reposDir, backendCommand))
mux := authz.Authentication(tokens, authz.Authorization(adminSvc, router))
server := &http.Server{
Addr: addr,
ReadHeaderTimeout: 5 * time.Second,
Handler: mux,
}
log.Fatal(server.ListenAndServe())
}
func init() {
flag.StringVar(&backendCommand, "c", "git http-backend", "CGI binary to execute")
flag.StringVar(&addr, "l", ":8080", "Address/port to listen on")
flag.StringVar(&modelPath, "m", "./auth_model.ini", "Authentication model")
flag.StringVar(&policyPath, "p", "./policy.csv", "auth policy")
flag.StringVar(&serverConfigPath, "s", "/gitserver.yaml", "serverconfig path")
flag.StringVar(&reposDir, "r", "./repos", "Directory containing git repositories")
flag.BoolVar(&mgmtRepo, "a", false, "mgmt repo used for configuration")
flag.BoolVar(&newToken, "t", false, "make a new token")
}
|
