syonad/clonepack
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add a simple auth function

Browse source 
Signed-off-by: GnomeZworc <nicolas.boufidjeline@g3e.fr>
This commit is contained in:
GnomeZworc 2026-04-25 20:11:46 +02:00
commit 87fe581353
Signed by: nicolas.boufideline
GPG key ID: 4406BBBF8845D632
10 changed files with 206 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

23
internal/api/repo_handler.go
View file

@ -21,6 +21,10 @@ func NewRepoHandler(svc *core.RepoService) *RepoHandler {
}
func (h *RepoHandler) Create(w http.ResponseWriter, r *http.Request) {
if err := Authorize(r.Context(), ActionRepoCreate, 0); err != nil {
Error(w, http.StatusForbidden, "forbidden")
return
}
var req CreateRepoRequest
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
Error(w, http.StatusBadRequest, "invalid JSON")
@ -44,6 +48,10 @@ func (h *RepoHandler) Create(w http.ResponseWriter, r *http.Request) {
}
func (h *RepoHandler) List(w http.ResponseWriter, r *http.Request) {
if err := Authorize(r.Context(), ActionRepoList, 0); err != nil {
Error(w, http.StatusForbidden, "forbidden")
return
}
repos, err := h.svc.List(r.Context())
if err != nil {
Error(w, http.StatusInternalServerError, err.Error())
@ -63,7 +71,10 @@ func (h *RepoHandler) Get(w http.ResponseWriter, r *http.Request) {
Error(w, http.StatusBadRequest, "invalid id")
return
}
if err := Authorize(r.Context(), ActionRepoRead, id); err != nil {
Error(w, http.StatusForbidden, "forbidden")
return
}
repo, err := h.svc.Get(r.Context(), id)
if errors.Is(err, store.ErrNotFound) {
Error(w, http.StatusNotFound, "repo not found")
@ -82,7 +93,10 @@ func (h *RepoHandler) Update(w http.ResponseWriter, r *http.Request) {
Error(w, http.StatusBadRequest, "invalid id")
return
}
if err := Authorize(r.Context(), ActionRepoUpdate, id); err != nil {
Error(w, http.StatusForbidden, "forbidden")
return
}
var req UpdateRepoRequest
if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
Error(w, http.StatusBadRequest, "invalid JSON")
@ -113,7 +127,10 @@ func (h *RepoHandler) Delete(w http.ResponseWriter, r *http.Request) {
Error(w, http.StatusBadRequest, "invalid id")
return
}
if err := Authorize(r.Context(), ActionRepoDelete, id); err != nil {
Error(w, http.StatusForbidden, "forbidden")
return
}
if err := h.svc.Delete(r.Context(), id); errors.Is(err, store.ErrNotFound) {
Error(w, http.StatusNotFound, "repo not found")
return