forge
/
hook.php
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Better discovery of scripts to test

This commit is contained in:
southerntofu 2020-10-03 12:55:17 -04:00
parent 56fdb018fa
commit 20c7059fd8
2 changed files with 35 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
index.php
View File

@ -73,9 +73,9 @@ function verify_token($secret, $claimed_secret) {
// find_secret($repo_url)
// Find the secret corresponding to the repo_url, if any. Returns empty string otherwise
function find_secret($repo_url) {
//$forgehook = getenv('FORGEHOOK') ? : 'forgehook';
// TODO: use in order ENV['FORGEHOOK'], ./forgehook, or PATH['forgehook']
$forgehook = './forgehook';
$forgehook = isset($_ENV['FORGEHOOK']) ? $_ENV['FORGEHOOK'] // from $ENV
: (file_exists('forgehook') ? './forgehook' // from current directory
: 'forgehook'); // from $PATH
$repo = escapeshellarg($repo_url);
@ -131,13 +131,37 @@ class GitlabWebhook {
}
}
class GithubWebhook {
function __construct($payload) {
$this->data = json_to_array($payload);
}
function repo_url() {
$repo_url = isset($this->data["repository"]["html_url"]) ?
$this->data["repository"]["html_url"] : "";
if (empty($repo_url)) {
error('Could not find Github repository URL');
}
return $repo_url;
}
function secret() {
return extract_header("HTTP_X_HUB_SIGNATURE");
}
}
function notify($repo) {
$notify = getenv('FORGEHOOKNOTIFY') ? : 'forgehook-notify';
//$notify = getenv('FORGEHOOKNOTIFY') ? : 'forgehook-notify';
$notify = isset($_ENV['FORGEHOOKNOTIFY']) ? $_ENV['FORGEHOOKNOTIFY'] // from $ENV
: (file_exists('forgehook-notify') ? './forgehook-notify' // from current directory
: 'forgehook-notify'); // from $PATH
$output=shell_exec($notify." ".$repo);
$lines = [];
$status = NULL;
exec($notify." ".$repo, $lines, $status);
if ($output != NULL) {
error("Notify failed (".$notify.") with:\n".$output);
if ($status != 0) {
error("Notify failed (".$notify.") with:\n".print_r($lines));
}
}
@ -150,10 +174,9 @@ function action() {
switch($_GET['action']) {
case 'github':
$claimed_secret = extract_header("HTTP_X_HUB_SIGNATURE");
$payload_array = json_to_array($payload);
// Gitea URL is same as Github, for the moment
$repo_url = find_url_gitea($payload_array);
$webhook = new GithubWebhook($payload);
$claimed_secret = $webhook->secret();
$repo_url = $webhook->repo_url();
$secret = find_secret($repo_url);
verify_signature($payload, $secret, $claimed_secret);
notify($repo_url);

2
spec

@ -1 +1 @@
Subproject commit b01656134c85eac50ecc60b4919d0f2fa577db84
Subproject commit a72ceda21cfde2ed9e6e19f65e007f2bc8778660