mirror of
https://github.com/git-pkgs/proxy.git
synced 2026-11-09 23:59:16 -05:00
ea696a7abchosted.enabled turns on pushing packages to the proxy and is off by default, like mirror_api. A pushed version is served in place of the upstream version with the same number, so anyone who can write could swap a package for every client. Enabling it therefore requires hosted.token, which supports ${VAR_NAME} expansion and can be set with PROXY_HOSTED_TOKEN. hosted.max_upload_size caps one archive and defaults to 100MB.
requireBearerToken compares SHA-256 digests of the presented and configured tokens in constant time and answers 401 with a WWW-Authenticate challenge otherwise.
Refs #133
44 lines
1.4 KiB
Go
44 lines
1.4 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
)
|
|
|
|
// Error codes returned in API error responses. These are stable identifiers
|
|
// that clients can match on; the message text is for humans and may change.
|
|
const (
|
|
ErrCodeBadRequest = "BAD_REQUEST"
|
|
ErrCodeNotFound = "NOT_FOUND"
|
|
ErrCodeUnauthorized = "UNAUTHORIZED"
|
|
ErrCodeUpstream = "UPSTREAM_ERROR"
|
|
ErrCodeInternal = "INTERNAL_ERROR"
|
|
ErrCodeBusy = "BUSY"
|
|
)
|
|
|
|
// ErrorResponse is the JSON body returned for API errors.
|
|
type ErrorResponse struct {
|
|
Code string `json:"code"`
|
|
Message string `json:"message"`
|
|
}
|
|
|
|
// writeError sends a JSON error response with the given status, code and
|
|
// user-facing message. Internal error details should be logged separately
|
|
// by the caller, never passed as the message.
|
|
func writeError(w http.ResponseWriter, status int, code, message string) {
|
|
w.Header().Set("Content-Type", "application/json")
|
|
w.WriteHeader(status)
|
|
_ = json.NewEncoder(w).Encode(ErrorResponse{Code: code, Message: message})
|
|
}
|
|
|
|
func badRequest(w http.ResponseWriter, message string) {
|
|
writeError(w, http.StatusBadRequest, ErrCodeBadRequest, message)
|
|
}
|
|
|
|
func notFound(w http.ResponseWriter, message string) {
|
|
writeError(w, http.StatusNotFound, ErrCodeNotFound, message)
|
|
}
|
|
|
|
func internalError(w http.ResponseWriter, message string) {
|
|
writeError(w, http.StatusInternalServerError, ErrCodeInternal, message)
|
|
}
|