Платформа ЦРНП "Мирокод" для разработки проектов
https://git.mirocod.ru
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
50 lines
1.2 KiB
50 lines
1.2 KiB
// Copyright 2021 The Gitea Authors. All rights reserved. |
|
// Use of this source code is governed by a MIT-style |
|
// license that can be found in the LICENSE file. |
|
|
|
package asymkey |
|
|
|
import ( |
|
"bytes" |
|
|
|
"code.gitea.io/gitea/models/db" |
|
"code.gitea.io/gitea/modules/log" |
|
|
|
"github.com/42wim/sshsig" |
|
) |
|
|
|
// VerifySSHKey marks a SSH key as verified |
|
func VerifySSHKey(ownerID int64, fingerprint, token, signature string) (string, error) { |
|
ctx, committer, err := db.TxContext() |
|
if err != nil { |
|
return "", err |
|
} |
|
defer committer.Close() |
|
|
|
key := new(PublicKey) |
|
|
|
has, err := db.GetEngine(ctx).Where("owner_id = ? AND fingerprint = ?", ownerID, fingerprint).Get(key) |
|
if err != nil { |
|
return "", err |
|
} else if !has { |
|
return "", ErrKeyNotExist{} |
|
} |
|
|
|
if err := sshsig.Verify(bytes.NewBuffer([]byte(token)), []byte(signature), []byte(key.Content), "gitea"); err != nil { |
|
log.Error("Unable to validate token signature. Error: %v", err) |
|
return "", ErrSSHInvalidTokenSignature{ |
|
Fingerprint: key.Fingerprint, |
|
} |
|
} |
|
|
|
key.Verified = true |
|
if _, err := db.GetEngine(ctx).ID(key.ID).Cols("verified").Update(key); err != nil { |
|
return "", err |
|
} |
|
|
|
if err := committer.Commit(); err != nil { |
|
return "", err |
|
} |
|
|
|
return key.Fingerprint, nil |
|
}
|
|
|