82 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Go
		
	
	
	
			
		
		
	
	
			82 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			Go
		
	
	
	
// Copyright 2021 The Gitea Authors. All rights reserved.
 | 
						|
// Use of this source code is governed by a MIT-style
 | 
						|
// license that can be found in the LICENSE file.
 | 
						|
 | 
						|
package auth
 | 
						|
 | 
						|
import (
 | 
						|
	"net/http"
 | 
						|
 | 
						|
	"code.gitea.io/gitea/models"
 | 
						|
)
 | 
						|
 | 
						|
// Ensure the struct implements the interface.
 | 
						|
var (
 | 
						|
	_ Method        = &Group{}
 | 
						|
	_ Initializable = &Group{}
 | 
						|
	_ Freeable      = &Group{}
 | 
						|
)
 | 
						|
 | 
						|
// Group implements the Auth interface with serval Auth.
 | 
						|
type Group struct {
 | 
						|
	methods []Method
 | 
						|
}
 | 
						|
 | 
						|
// NewGroup creates a new auth group
 | 
						|
func NewGroup(methods ...Method) *Group {
 | 
						|
	return &Group{
 | 
						|
		methods: methods,
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
// Init does nothing as the Basic implementation does not need to allocate any resources
 | 
						|
func (b *Group) Init() error {
 | 
						|
	for _, method := range b.methods {
 | 
						|
		initializable, ok := method.(Initializable)
 | 
						|
		if !ok {
 | 
						|
			continue
 | 
						|
		}
 | 
						|
 | 
						|
		if err := initializable.Init(); err != nil {
 | 
						|
			return err
 | 
						|
		}
 | 
						|
	}
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Free does nothing as the Basic implementation does not have to release any resources
 | 
						|
func (b *Group) Free() error {
 | 
						|
	for _, method := range b.methods {
 | 
						|
		freeable, ok := method.(Freeable)
 | 
						|
		if !ok {
 | 
						|
			continue
 | 
						|
		}
 | 
						|
		if err := freeable.Free(); err != nil {
 | 
						|
			return err
 | 
						|
		}
 | 
						|
	}
 | 
						|
	return nil
 | 
						|
}
 | 
						|
 | 
						|
// Verify extracts and validates
 | 
						|
func (b *Group) Verify(req *http.Request, w http.ResponseWriter, store DataStore, sess SessionStore) *models.User {
 | 
						|
	if !models.HasEngine {
 | 
						|
		return nil
 | 
						|
	}
 | 
						|
 | 
						|
	// Try to sign in with each of the enabled plugins
 | 
						|
	for _, ssoMethod := range b.methods {
 | 
						|
		user := ssoMethod.Verify(req, w, store, sess)
 | 
						|
		if user != nil {
 | 
						|
			if store.GetData()["AuthedMethod"] == nil {
 | 
						|
				if named, ok := ssoMethod.(Named); ok {
 | 
						|
					store.GetData()["AuthedMethod"] = named.Name()
 | 
						|
				}
 | 
						|
			}
 | 
						|
			return user
 | 
						|
		}
 | 
						|
	}
 | 
						|
 | 
						|
	return nil
 | 
						|
}
 |