52 lines
3.1 KiB
Bash
52 lines
3.1 KiB
Bash
#!/bin/bash
|
|
|
|
#=================================================
|
|
# SET ALL CONSTANTS
|
|
#=================================================
|
|
|
|
function set_forgejo_login_source() {
|
|
ynh_print_info --message="Creating forgejo login source"
|
|
pushd "$install_dir"
|
|
ynh_exec_as $app ./forgejo admin auth add-ldap-simple --security-protocol "Unencrypted" --name "YunoHost LDAP" --host "localhost" --port "389" --skip-tls-verify --user-search-base "ou=users,dc=yunohost,dc=org" --user-dn "uid=%s,ou=Users,dc=yunohost,dc=org" --user-filter "(&(objectclass=posixAccount)(uid=%s)(permission=cn=$app.main,ou=permission,dc=yunohost,dc=org))" --admin-filter "(permission=cn=forgejo.admin,ou=permission,dc=yunohost,dc=org)" --username-attribute "uid" --firstname-attribute "givenName" --surname-attribute "sn" --email-attribute "mail"
|
|
popd
|
|
}
|
|
|
|
function enable_login_source_sync() {
|
|
ynh_print_info --message="Set forgejo login source as synchronizable"
|
|
# Enable login source synchronisation manualy because forgejo command does not allow it (https://codeberg.org/forgejo/forgejo/issues/952)
|
|
ynh_psql_execute_as_root --database $db_name --sql "update login_source set is_sync_enabled = true where type = 5 and name = 'YunoHost LDAP'"
|
|
}
|
|
|
|
function create_forgejo_api_user() {
|
|
ynh_print_info --message="Creating forgejo api user"
|
|
forgejo_api_user=yunohost_api
|
|
forgejo_api_pwd=$(ynh_string_random --length=24)
|
|
ynh_app_setting_set --app=$app --key=forgejo_api_user --value=$forgejo_api_user
|
|
ynh_app_setting_set --app=$app --key=forgejo_api_pwd --value=$forgejo_api_pwd
|
|
pushd "$install_dir"
|
|
ynh_exec_as $app ./forgejo admin user create --username $forgejo_api_user --password $forgejo_api_pwd --email admin@${domain} --admin --must-change-password=false
|
|
forgejo_api_token=$(ynh_exec_as $app ./forgejo admin user generate-access-token --username $forgejo_api_user --token-name "admin" --scopes "write:admin" --raw | tail -1)
|
|
ynh_app_setting_set --app=$app --key=forgejo_api_token --value=$forgejo_api_token
|
|
popd
|
|
}
|
|
|
|
function set_users_login_source() {
|
|
# Previously created users have «Local» login source. It should be «YunoHost LDAP»
|
|
for username in $(ynh_user_list); do
|
|
ynh_print_info --message="Updating forgejo user login type for ${username}"
|
|
|
|
ynh_psql_execute_as_root --database $db_name --sql "update public.user set login_source = (select id from login_source where name = 'YunoHost LDAP' and type = 5), login_name = name, login_type = 5 where name = '${username}'"
|
|
done
|
|
}
|
|
|
|
function synchronize_users() {
|
|
ynh_print_info --message="Synchronizing forgejo users"
|
|
# Fetch the token independently such that it's redacted by Yunohost logging mechanism
|
|
forgejo_api_token=$(ynh_app_setting_get --app=$app --key=forgejo_api_token)
|
|
|
|
# Remove trailing slash from path
|
|
local no_trailing_slash_path=${path%/}
|
|
|
|
# User synchronization must be launched using API : no cli exists for this purpose (https://codeberg.org/forgejo/forgejo/issues/953)
|
|
curl --url https://${domain}${no_trailing_slash_path}/api/v1/admin/cron/sync_external_users -X POST -H "Authorization: token $forgejo_api_token" -kfsS
|
|
}
|