mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-10-11 08:27:36 +00:00
6c6eac3a5c
Since I use go 1.26 the go fix does not have all the rules built in, there are newer ones in modernize so run the explicitly to fix more code for go 1.26. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
64 lines
1.9 KiB
Go
64 lines
1.9 KiB
Go
//go:build !remote && (linux || freebsd)
|
|
|
|
package compat
|
|
|
|
import (
|
|
"errors"
|
|
"io"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/moby/moby/api/types/registry"
|
|
"go.podman.io/common/pkg/auth"
|
|
DockerClient "go.podman.io/image/v5/docker"
|
|
"go.podman.io/image/v5/types"
|
|
"go.podman.io/podman/v6/libpod"
|
|
"go.podman.io/podman/v6/pkg/api/handlers/utils"
|
|
api "go.podman.io/podman/v6/pkg/api/types"
|
|
"go.podman.io/podman/v6/pkg/domain/entities"
|
|
)
|
|
|
|
func Auth(w http.ResponseWriter, r *http.Request) {
|
|
var authConfig registry.AuthConfig
|
|
if err := utils.ReadJSONFromBody(r, &authConfig); err != nil {
|
|
utils.Error(w, http.StatusBadRequest, err)
|
|
return
|
|
}
|
|
|
|
skipTLS := types.NewOptionalBool(false)
|
|
if strings.HasPrefix(authConfig.ServerAddress, "https://localhost/") || strings.HasPrefix(authConfig.ServerAddress, "https://localhost:") || strings.HasPrefix(authConfig.ServerAddress, "localhost:") {
|
|
// support for local testing
|
|
skipTLS = types.NewOptionalBool(true)
|
|
}
|
|
|
|
runtime := r.Context().Value(api.RuntimeKey).(*libpod.Runtime)
|
|
sysCtx := runtime.SystemContext()
|
|
sysCtx.DockerInsecureSkipTLSVerify = skipTLS
|
|
|
|
loginOpts := &auth.LoginOptions{
|
|
Username: authConfig.Username,
|
|
Password: authConfig.Password,
|
|
Stdout: io.Discard,
|
|
NoWriteBack: true, // to prevent credentials to be written on disk
|
|
}
|
|
if err := auth.Login(r.Context(), sysCtx, loginOpts, []string{authConfig.ServerAddress}); err == nil {
|
|
utils.WriteResponse(w, http.StatusOK, entities.AuthReport{
|
|
IdentityToken: "",
|
|
Status: "Login Succeeded",
|
|
})
|
|
} else {
|
|
var msg string
|
|
|
|
if _, ok := errors.AsType[DockerClient.ErrUnauthorizedForCredentials](err); ok {
|
|
msg = "401 Unauthorized"
|
|
} else {
|
|
msg = err.Error()
|
|
}
|
|
|
|
utils.WriteResponse(w, http.StatusInternalServerError, struct {
|
|
Message string `json:"message"`
|
|
}{
|
|
Message: "login attempt to " + authConfig.ServerAddress + " failed with status: " + msg,
|
|
})
|
|
}
|
|
}
|