// Copyright 2022 Woodpecker Authors // Copyright 2021 Informatyka Boguslawski sp. z o.o. sp.k., http://www.ib.pl/ // Copyright 2018 Drone.IO Inc. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. // // This file has been modified by Informatyka Boguslawski sp. z o.o. sp.k. package api import ( "bytes" "encoding/json" "errors" "fmt" "io" "net/http" "strconv" "time" "github.com/woodpecker-ci/woodpecker/server" "github.com/woodpecker-ci/woodpecker/server/store/types" "github.com/gin-gonic/gin" "github.com/rs/zerolog/log" "github.com/woodpecker-ci/woodpecker/server/model" "github.com/woodpecker-ci/woodpecker/server/pipeline" "github.com/woodpecker-ci/woodpecker/server/router/middleware/session" "github.com/woodpecker-ci/woodpecker/server/store" ) func CreatePipeline(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) var p model.PipelineOptions err := json.NewDecoder(c.Request.Body).Decode(&p) if err != nil { _ = c.AbortWithError(http.StatusBadRequest, err) return } user := session.User(c) lastCommit, _ := server.Config.Services.Remote.BranchHead(c, user, repo, p.Branch) tmpBuild := createTmpPipeline(model.EventManual, lastCommit, repo, user, &p) pl, err := pipeline.Create(c, _store, repo, tmpBuild) if err != nil { handlePipelineErr(c, err) } else { c.JSON(http.StatusOK, pl) } } func createTmpPipeline(event model.WebhookEvent, commitSHA string, repo *model.Repo, user *model.User, opts *model.PipelineOptions) *model.Pipeline { return &model.Pipeline{ Event: event, Commit: commitSHA, Branch: opts.Branch, Timestamp: time.Now().UTC().Unix(), Avatar: user.Avatar, Message: "MANUAL PIPELINE @ " + opts.Branch, Ref: opts.Branch, AdditionalVariables: opts.Variables, Author: user.Login, Email: user.Email, // TODO: Generate proper link to commit Link: repo.Link, } } func GetPipelines(c *gin.Context) { repo := session.Repo(c) page, err := strconv.Atoi(c.DefaultQuery("page", "1")) if err != nil { _ = c.AbortWithError(http.StatusBadRequest, err) return } pipelines, err := store.FromContext(c).GetPipelineList(repo, page) if err != nil { if errors.Is(err, types.RecordNotExist) { c.AbortWithStatus(http.StatusNotFound) return } c.AbortWithStatus(http.StatusInternalServerError) return } c.JSON(http.StatusOK, pipelines) } func GetPipeline(c *gin.Context) { _store := store.FromContext(c) if c.Param("number") == "latest" { GetPipelineLast(c) return } repo := session.Repo(c) num, err := strconv.ParseInt(c.Param("number"), 10, 64) if err != nil { _ = c.AbortWithError(http.StatusBadRequest, err) return } pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(http.StatusInternalServerError, err) return } files, _ := _store.FileList(pl) steps, _ := _store.StepList(pl) if pl.Steps, err = model.Tree(steps); err != nil { _ = c.AbortWithError(http.StatusInternalServerError, err) return } pl.Files = files c.JSON(http.StatusOK, pl) } func GetPipelineLast(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) branch := c.DefaultQuery("branch", repo.Branch) pl, err := _store.GetPipelineLast(repo, branch) if err != nil { c.String(http.StatusInternalServerError, err.Error()) return } steps, err := _store.StepList(pl) if err != nil { _ = c.AbortWithError(http.StatusInternalServerError, err) return } if pl.Steps, err = model.Tree(steps); err != nil { _ = c.AbortWithError(http.StatusInternalServerError, err) return } c.JSON(http.StatusOK, pl) } func GetPipelineLogs(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) // parse the pipeline number and step sequence number from // the request parameter. num, _ := strconv.ParseInt(c.Params.ByName("number"), 10, 64) ppid, _ := strconv.Atoi(c.Params.ByName("pid")) name := c.Params.ByName("step") pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(404, err) return } step, err := _store.StepChild(pl, ppid, name) if err != nil { _ = c.AbortWithError(404, err) return } rc, err := _store.LogFind(step) if err != nil { _ = c.AbortWithError(404, err) return } defer rc.Close() c.Header("Content-Type", "application/json") if _, err := io.Copy(c.Writer, rc); err != nil { log.Error().Err(err).Msg("could not copy log to http response") } } func GetStepLogs(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) // parse the pipeline number and step sequence number from // the request parameter. num, _ := strconv.ParseInt(c.Params.ByName("number"), 10, 64) pid, _ := strconv.Atoi(c.Params.ByName("pid")) pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(http.StatusNotFound, err) return } step, err := _store.StepFind(pl, pid) if err != nil { _ = c.AbortWithError(http.StatusNotFound, err) return } rc, err := _store.LogFind(step) if err != nil { _ = c.AbortWithError(http.StatusNotFound, err) return } defer rc.Close() c.Header("Content-Type", "application/json") if _, err := io.Copy(c.Writer, rc); err != nil { log.Error().Err(err).Msg("could not copy log to http response") } } func GetPipelineConfig(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) num, err := strconv.ParseInt(c.Param("number"), 10, 64) if err != nil { _ = c.AbortWithError(http.StatusBadRequest, err) return } pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(http.StatusInternalServerError, err) return } configs, err := _store.ConfigsForPipeline(pl.ID) if err != nil { c.String(http.StatusInternalServerError, err.Error()) return } c.JSON(http.StatusOK, configs) } // DeletePipeline cancels a pipeline func DeletePipeline(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) num, _ := strconv.ParseInt(c.Params.ByName("number"), 10, 64) pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(http.StatusNotFound, err) return } if err := pipeline.Cancel(c, _store, repo, pl); err != nil { handlePipelineErr(c, err) } else { c.Status(http.StatusNoContent) } } // PostApproval start pipelines in gated repos func PostApproval(c *gin.Context) { var ( _store = store.FromContext(c) repo = session.Repo(c) user = session.User(c) num, _ = strconv.ParseInt(c.Params.ByName("number"), 10, 64) ) pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(404, err) return } newpipeline, err := pipeline.Approve(c, _store, pl, user, repo) if err != nil { handlePipelineErr(c, err) } else { c.JSON(200, newpipeline) } } // PostDecline decline pipelines in gated repos func PostDecline(c *gin.Context) { var ( _store = store.FromContext(c) repo = session.Repo(c) user = session.User(c) num, _ = strconv.ParseInt(c.Params.ByName("number"), 10, 64) ) pl, err := _store.GetPipelineNumber(repo, num) if err != nil { c.String(http.StatusNotFound, "%v", err) return } pl, err = pipeline.Decline(c, _store, pl, user, repo) if err != nil { handlePipelineErr(c, err) } else { c.JSON(200, pl) } } func GetPipelineQueue(c *gin.Context) { out, err := store.FromContext(c).GetPipelineQueue() if err != nil { c.String(500, "Error getting pipeline queue. %s", err) return } c.JSON(200, out) } // PostPipeline restarts a pipeline optional with altered event, deploy or environment func PostPipeline(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) num, err := strconv.ParseInt(c.Param("number"), 10, 64) if err != nil { _ = c.AbortWithError(http.StatusBadRequest, err) return } user, err := _store.GetUser(repo.UserID) if err != nil { log.Error().Msgf("failure to find repo owner %s. %s", repo.FullName, err) _ = c.AbortWithError(500, err) return } pl, err := _store.GetPipelineNumber(repo, num) if err != nil { log.Error().Msgf("failure to get pipeline %d. %s", num, err) _ = c.AbortWithError(404, err) return } // refresh the token to make sure, pipeline.ReStart can still obtain the pipeline config if nessessary again refreshUserToken(c, user) // make Deploy overridable pl.Deploy = c.DefaultQuery("deploy_to", pl.Deploy) // make Event overridable if event, ok := c.GetQuery("event"); ok { pl.Event = model.WebhookEvent(event) if !model.ValidateWebhookEvent(pl.Event) { msg := fmt.Sprintf("pipeline event '%s' is invalid", event) c.String(http.StatusBadRequest, msg) return } } // Read query string parameters into pipelineParams, exclude reserved params envs := map[string]string{} for key, val := range c.Request.URL.Query() { switch key { // Skip some options of the endpoint case "fork", "event", "deploy_to": continue default: // We only accept string literals, because pipeline parameters will be // injected as environment variables // TODO: sanitize the value envs[key] = val[0] } } newpipeline, err := pipeline.Restart(c, _store, pl, user, repo, envs) if err != nil { handlePipelineErr(c, err) } else { c.JSON(200, newpipeline) } } func DeletePipelineLogs(c *gin.Context) { _store := store.FromContext(c) repo := session.Repo(c) user := session.User(c) num, _ := strconv.ParseInt(c.Params.ByName("number"), 10, 64) pl, err := _store.GetPipelineNumber(repo, num) if err != nil { _ = c.AbortWithError(404, err) return } steps, err := _store.StepList(pl) if err != nil { _ = c.AbortWithError(404, err) return } switch pl.Status { case model.StatusRunning, model.StatusPending: c.String(400, "Cannot delete logs for a pending or running pipeline") return } for _, step := range steps { t := time.Now().UTC() buf := bytes.NewBufferString(fmt.Sprintf(deleteStr, step.Name, user.Login, t.Format(time.UnixDate))) lerr := _store.LogSave(step, buf) if lerr != nil { err = lerr } } if err != nil { c.String(400, "There was a problem deleting your logs. %s", err) return } c.String(204, "") } var deleteStr = `[ { "step": %q, "pos": 0, "out": "logs purged by %s on %s\n" } ]`