aboutsummaryrefslogtreecommitdiff
path: root/packages/server/src/git/http.ts
blob: 36bae0409db33b9e09d73510feb307196f80e0e1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
import { FastifyReply, FastifyRequest } from "fastify";
import { Repository } from "./repository";
import { Route } from "../types/fastify";
import { join } from "path";
import { spawn } from "child_process";

export interface Request extends FastifyRequest {
	params: Route["Params"],
}

function writeRefDiscoveryFirstLine(service: string, reply: FastifyReply) {
	const s = "# service=" + service + "\n";
	const n = (4 + s.length).toString(16);
	reply.raw.write(Buffer.from((Array(4 - n.length + 1).join("0") + n + s) + "0000"));
}

export function connect(repository: Repository, req: Request, reply: FastifyReply): void {
	const parsed_url = new URL(`${req.protocol}://${req.hostname}${req.url.replace(req.params.repo, repository.name.short)}`);

	const is_discovery = (/\/info\/refs$/u).test(parsed_url.pathname);

	const url_path_parts = parsed_url.pathname.split("/");

	const service = is_discovery
		? parsed_url.searchParams.get("service") || ""
		: url_path_parts[url_path_parts.length - 1];

	const content_type = `application/x-${service}-${is_discovery ? "advertisement" : "result"}`;

	// Deny any malicious requests
	if(/\.\/|\.\./u.test(parsed_url.pathname) || service !== "git-upload-pack") {
		reply.header("Content-Type", content_type);
		reply.code(403).send("Access denied!");
		return;
	}

	reply.raw.writeHead(200, { "Content-Type": content_type });

	const spawn_args = [ "--stateless-rpc", join(repository.base_dir, repository.name.full) ];

	if(is_discovery) {
		spawn_args.push("--advertise-refs");
	}

	const git_service = spawn(service, spawn_args);

	if(is_discovery) {
		writeRefDiscoveryFirstLine(service, reply);
	}
	else {
		req.raw.pipe(git_service.stdin);

		// Request error
		req.raw.on("error", err => {
			console.log(err);
			git_service.stdin.end();
			reply.raw.end();
		});
	}

	git_service.stdout.pipe(reply.raw);

	// Spawn error
	git_service.on("error", err => {
		console.log(err);
		reply.raw.end();
	});

	// Git service error
	git_service.stderr.on("data", (stderr: Buffer) => {
		console.log(stderr.toString());
		reply.raw.end();
	});
}