mirror of
https://github.com/goharbor/harbor.git
synced 2025-01-10 18:07:42 +01:00
parent
0b02231093
commit
b3b95fbf7b
@ -16,12 +16,14 @@ package token
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"net/http"
|
||||
"net/url"
|
||||
"strings"
|
||||
|
||||
"github.com/docker/distribution/registry/auth/token"
|
||||
"github.com/vmware/harbor/src/common/dao"
|
||||
"github.com/vmware/harbor/src/common/utils/log"
|
||||
"github.com/vmware/harbor/src/ui/config"
|
||||
"net/http"
|
||||
"strings"
|
||||
)
|
||||
|
||||
var creatorMap map[string]Creator
|
||||
@ -200,11 +202,7 @@ func (e *unauthorizedError) Error() string {
|
||||
func (g generalCreator) Create(r *http.Request) (*tokenJSON, error) {
|
||||
var user *userInfo
|
||||
var err error
|
||||
var scopes []string
|
||||
scopeParm := r.URL.Query()["scope"]
|
||||
if len(scopeParm) > 0 {
|
||||
scopes = strings.Split(r.URL.Query()["scope"][0], " ")
|
||||
}
|
||||
scopes := parseScopes(r.URL)
|
||||
log.Debugf("scopes: %v", scopes)
|
||||
for _, v := range g.validators {
|
||||
user, err = v.validate(r)
|
||||
@ -228,3 +226,12 @@ func (g generalCreator) Create(r *http.Request) (*tokenJSON, error) {
|
||||
}
|
||||
return makeToken(user.name, g.service, access)
|
||||
}
|
||||
|
||||
func parseScopes(u *url.URL) []string {
|
||||
var sector string
|
||||
var result []string
|
||||
for _, sector = range u.Query()["scope"] {
|
||||
result = append(result, strings.Split(sector, " ")...)
|
||||
}
|
||||
return result
|
||||
}
|
||||
|
@ -25,6 +25,7 @@ import (
|
||||
"github.com/vmware/harbor/src/common/utils/test"
|
||||
"github.com/vmware/harbor/src/ui/config"
|
||||
"io/ioutil"
|
||||
"net/url"
|
||||
"os"
|
||||
"path"
|
||||
"runtime"
|
||||
@ -228,3 +229,11 @@ func TestFilterAccess(t *testing.T) {
|
||||
assert.Nil(t, err, "Unexpected error: %v", err)
|
||||
assert.Equal(t, ra2, *a3[0], "Mismatch after registry filter Map")
|
||||
}
|
||||
|
||||
func TestParseScopes(t *testing.T) {
|
||||
assert := assert.New(t)
|
||||
u1 := "/service/token?account=admin&scope=repository%3Alibrary%2Fregistry%3Apush%2Cpull&scope=repository%3Ahello-world%2Fregistry%3Apull&service=harbor-registry"
|
||||
r1, _ := url.Parse(u1)
|
||||
l1 := parseScopes(r1)
|
||||
assert.Equal([]string{"repository:library/registry:push,pull", "repository:hello-world/registry:pull"}, l1)
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user