jbox-web/redmine_git_hosting

# frozen_string_literal: true

module RedmineGitHosting
  class GitAccess
    DOWNLOAD_COMMANDS = %w[git-upload-pack git-upload-archive].freeze
    PUSH_COMMANDS     = %w[git-receive-pack].freeze

    def download_access_check(actor, repository, ssl: false)
      # First check that SmartHTTP is enabled for repository
      return smart_http_is_disabled! repository unless smart_http_enabled_for_download? repository, ssl: ssl

      # Then check user permissions
      raise 'Wrong actor' unless actor.is_a? User

      user_download_access_check actor, repository
    end

    def upload_access_check(actor, repository)
      # First check that SmartHTTP is enabled for repository
      return smart_http_is_disabled! repository unless smart_http_enabled_for_upload? repository

      # Then check user permissions
      raise 'Wrong actor' unless actor.is_a? User

      user_upload_access_check actor, repository
    end

    def user_download_access_check(user, repository)
      if user&.allowed_to_clone? repository
        build_status_object true
      else
        build_status_object false, "You don't have access"
      end
    end

    def user_upload_access_check(user, repository)
      if user&.allowed_to_commit? repository
        build_status_object true
      else
        build_status_object false, "You don't have access"
      end
    end

    protected

    def build_status_object(status, message = '')
      logger.warn message unless status
      GitAccessStatus.new status, message
    end

    private

    def smart_http_is_disabled!(repository)
      build_status_object false, "SmartHTTP is disabled for repository '#{repository.gitolite_repository_name}' !"
    end

    def smart_http_enabled_for_download?(repository, ssl: false)
      # SmartHTTP is disabled
      return false unless repository.smart_http_enabled?
      # HTTPS only but no SSL
      return false if repository.only_https_access_enabled? && !ssl
      # HTTP only but have SSL (weird..)
      return false if repository.only_http_access_enabled? && ssl

      # Else return true
      true
    end

    def smart_http_enabled_for_upload?(repository)
      # HTTPS only
      return true if repository.pushable_via_http?

      # Else
      false
    end

    def logger
      RedmineGitHosting.logger
    end
  end
end