2026-02-12 09:20:55 +03:00
|
|
|
#!/usr/bin/env bash
|
|
|
|
|
# lib/auth.sh — Authenticated URLs, remote queries, and PR creation
|
|
|
|
|
#
|
|
|
|
|
# Requires: lib/core.sh and lib/config.sh sourced first
|
|
|
|
|
# Expects: JOSH_PROXY_URL, MONOREPO_PATH, BOT_USER, GITEA_TOKEN, JOSH_FILTER,
|
|
|
|
|
# SUBREPO_URL, SUBREPO_AUTH, SUBREPO_TOKEN (set by parse_config + load_target)
|
|
|
|
|
|
|
|
|
|
# ─── Josh-Proxy Auth URL ───────────────────────────────────────────
|
|
|
|
|
# Josh always uses HTTPS. Filter is embedded in the URL path.
|
|
|
|
|
# Result: https://user:token@proxy/org/repo.git:/services/app.git
|
|
|
|
|
|
|
|
|
|
josh_auth_url() {
|
|
|
|
|
local base="${JOSH_PROXY_URL}/${MONOREPO_PATH}.git${JOSH_FILTER}.git"
|
2026-02-12 14:33:26 +03:00
|
|
|
# shellcheck disable=SC2001 # sed is clearer than ${var//} for URL injection
|
2026-02-12 09:20:55 +03:00
|
|
|
echo "$base" | sed "s|https://|https://${BOT_USER}:${GITEA_TOKEN}@|"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# ─── Subrepo Auth URL ──────────────────────────────────────────────
|
|
|
|
|
# HTTPS: injects user:token into URL
|
|
|
|
|
# SSH: returns bare URL (auth via GIT_SSH_COMMAND set by load_target)
|
|
|
|
|
|
|
|
|
|
subrepo_auth_url() {
|
|
|
|
|
if [ "${SUBREPO_AUTH:-https}" = "ssh" ]; then
|
|
|
|
|
echo "$SUBREPO_URL"
|
|
|
|
|
else
|
2026-02-12 14:33:26 +03:00
|
|
|
# shellcheck disable=SC2001
|
2026-02-12 09:20:55 +03:00
|
|
|
echo "$SUBREPO_URL" | sed "s|https://|https://${BOT_USER}:${SUBREPO_TOKEN}@|"
|
|
|
|
|
fi
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# ─── Remote Queries ─────────────────────────────────────────────────
|
|
|
|
|
|
|
|
|
|
subrepo_ls_remote() {
|
|
|
|
|
local ref="${1:-HEAD}"
|
|
|
|
|
local output
|
|
|
|
|
output=$(git ls-remote "$(subrepo_auth_url)" "refs/heads/${ref}") \
|
|
|
|
|
|| die "Failed to reach subrepo (check SSH key / auth)"
|
|
|
|
|
echo "$output" | awk '{print $1}'
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# ─── PR Creation ────────────────────────────────────────────────────
|
2026-02-13 12:41:44 +03:00
|
|
|
# Shared helpers for creating PRs on Gitea/GitHub API.
|
2026-02-12 09:20:55 +03:00
|
|
|
# Usage: create_pr <api_url> <token> <base> <head> <title> <body>
|
2026-02-13 12:41:44 +03:00
|
|
|
# number=$(create_pr_number <api_url> <token> <base> <head> <title> <body>)
|
|
|
|
|
#
|
|
|
|
|
# create_pr — fire-and-forget (stdout suppressed, safe inside sync functions)
|
|
|
|
|
# create_pr_number — returns the new PR number via stdout
|
2026-02-12 09:20:55 +03:00
|
|
|
|
2026-02-13 12:41:44 +03:00
|
|
|
create_pr_number() {
|
|
|
|
|
local api_url="$1" token="$2" base="$3" head="$4" title="$5" body="$6"
|
2026-02-12 09:20:55 +03:00
|
|
|
|
|
|
|
|
curl -sf -X POST \
|
|
|
|
|
-H "Authorization: token ${token}" \
|
|
|
|
|
-H "Content-Type: application/json" \
|
|
|
|
|
-d "$(jq -n \
|
|
|
|
|
--arg base "$base" \
|
|
|
|
|
--arg head "$head" \
|
|
|
|
|
--arg title "$title" \
|
|
|
|
|
--arg body "$body" \
|
|
|
|
|
'{base:$base, head:$head, title:$title, body:$body}')" \
|
2026-02-13 12:41:44 +03:00
|
|
|
"${api_url}/pulls" | jq -r '.number'
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
create_pr() {
|
|
|
|
|
create_pr_number "$@" >/dev/null
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# ─── PR API Helpers ──────────────────────────────────────────────
|
|
|
|
|
# Used by onboard and migrate-pr commands.
|
|
|
|
|
|
|
|
|
|
# List open PRs on a repo. Returns JSON array.
|
|
|
|
|
# Usage: list_open_prs <api_url> <token>
|
|
|
|
|
list_open_prs() {
|
|
|
|
|
local api_url="$1" token="$2"
|
|
|
|
|
curl -sf -H "Authorization: token ${token}" \
|
|
|
|
|
"${api_url}/pulls?state=open&limit=50"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Get PR diff as plain text.
|
|
|
|
|
# Usage: get_pr_diff <api_url> <token> <pr_number>
|
|
|
|
|
get_pr_diff() {
|
|
|
|
|
local api_url="$1" token="$2" pr_number="$3"
|
|
|
|
|
curl -sf -H "Authorization: token ${token}" \
|
|
|
|
|
"${api_url}/pulls/${pr_number}.diff"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# Get single PR as JSON (for checking merge status, metadata, etc.).
|
|
|
|
|
# Usage: get_pr <api_url> <token> <pr_number>
|
|
|
|
|
get_pr() {
|
|
|
|
|
local api_url="$1" token="$2" pr_number="$3"
|
|
|
|
|
curl -sf -H "Authorization: token ${token}" \
|
|
|
|
|
"${api_url}/pulls/${pr_number}"
|
2026-02-12 09:20:55 +03:00
|
|
|
}
|
