Monorepo for Tangled
tangled.org
1package xrpc
2
3import (
4 "encoding/json"
5 "fmt"
6 "net/http"
7
8 comatproto "github.com/bluesky-social/indigo/api/atproto"
9 "github.com/bluesky-social/indigo/atproto/syntax"
10 "github.com/bluesky-social/indigo/xrpc"
11 "tangled.org/core/api/tangled"
12 "tangled.org/core/knotserver/git"
13 "tangled.org/core/rbac"
14 xrpcerr "tangled.org/core/xrpc/errors"
15)
16
17func (x *Xrpc) HiddenRef(w http.ResponseWriter, r *http.Request) {
18 l := x.Logger.With("handler", "HiddenRef")
19 fail := func(e xrpcerr.XrpcError) {
20 l.Error("failed", "kind", e.Tag, "error", e.Message)
21 writeError(w, e, http.StatusBadRequest)
22 }
23
24 actorDid, ok := r.Context().Value(ActorDid).(syntax.DID)
25 if !ok {
26 fail(xrpcerr.MissingActorDidError)
27 return
28 }
29
30 var data tangled.RepoHiddenRef_Input
31 if err := json.NewDecoder(r.Body).Decode(&data); err != nil {
32 fail(xrpcerr.GenericError(err))
33 return
34 }
35
36 forkRef := data.ForkRef
37 remoteRef := data.RemoteRef
38 repoAtUri := data.Repo
39
40 if forkRef == "" || remoteRef == "" || repoAtUri == "" {
41 fail(xrpcerr.GenericError(fmt.Errorf("forkRef, remoteRef, and repo are required")))
42 return
43 }
44
45 repoAt, err := syntax.ParseATURI(repoAtUri)
46 if err != nil {
47 fail(xrpcerr.InvalidRepoError(repoAtUri))
48 return
49 }
50
51 ident, err := x.Resolver.ResolveIdent(r.Context(), repoAt.Authority().String())
52 if err != nil || ident.Handle.IsInvalidHandle() {
53 fail(xrpcerr.GenericError(fmt.Errorf("failed to resolve handle: %w", err)))
54 return
55 }
56
57 xrpcc := xrpc.Client{Host: ident.PDSEndpoint()}
58 resp, err := comatproto.RepoGetRecord(r.Context(), &xrpcc, "", tangled.RepoNSID, repoAt.Authority().String(), repoAt.RecordKey().String())
59 if err != nil {
60 fail(xrpcerr.GenericError(err))
61 return
62 }
63
64 if _, ok := resp.Value.Val.(*tangled.Repo); !ok {
65 fail(xrpcerr.RepoNotFoundError)
66 return
67 }
68 repoDid, err := x.Db.GetRepoDid(actorDid.String(), repoAt.RecordKey().String())
69 if err != nil {
70 fail(xrpcerr.RepoNotFoundError)
71 return
72 }
73 repoPath, _, _, err := x.Db.ResolveRepoDIDOnDisk(x.Config.Repo.ScanPath, repoDid)
74 if err != nil {
75 fail(xrpcerr.RepoNotFoundError)
76 return
77 }
78
79 if ok, err := x.Enforcer.IsPushAllowed(actorDid.String(), rbac.ThisServer, repoDid); !ok || err != nil {
80 l.Error("insufficient permissions", "did", actorDid.String(), "repo", repoDid)
81 writeError(w, xrpcerr.AccessControlError(actorDid.String()), http.StatusUnauthorized)
82 return
83 }
84
85 gr, err := git.PlainOpen(repoPath)
86 if err != nil {
87 fail(xrpcerr.GenericError(fmt.Errorf("failed to open repository: %w", err)))
88 return
89 }
90
91 err = gr.TrackHiddenRemoteRef(forkRef, remoteRef)
92 if err != nil {
93 l.Error("error tracking hidden remote ref", "error", err.Error())
94 writeError(w, xrpcerr.GitError(err), http.StatusInternalServerError)
95 return
96 }
97
98 response := tangled.RepoHiddenRef_Output{
99 Success: true,
100 }
101
102 w.Header().Set("Content-Type", "application/json")
103 w.WriteHeader(http.StatusOK)
104 json.NewEncoder(w).Encode(response)
105}