mirror of https://github.com/gogits/gogs.git
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
69 lines
1.6 KiB
69 lines
1.6 KiB
// Copyright 2014 The Gogs Authors. All rights reserved. |
|
// Use of this source code is governed by a MIT-style |
|
// license that can be found in the LICENSE file. |
|
|
|
package middleware |
|
|
|
import ( |
|
"net/url" |
|
"strings" |
|
|
|
"github.com/Unknwon/macaron" |
|
"github.com/macaron-contrib/csrf" |
|
|
|
"github.com/gogits/gogs/modules/setting" |
|
) |
|
|
|
type ToggleOptions struct { |
|
SignInRequire bool |
|
SignOutRequire bool |
|
AdminRequire bool |
|
DisableCsrf bool |
|
} |
|
|
|
func Toggle(options *ToggleOptions) macaron.Handler { |
|
return func(ctx *Context) { |
|
// Cannot view any page before installation. |
|
if !setting.InstallLock { |
|
ctx.Redirect(setting.AppSubUrl + "/install") |
|
return |
|
} |
|
|
|
// Redirect to dashboard if user tries to visit any non-login page. |
|
if options.SignOutRequire && ctx.IsSigned && ctx.Req.RequestURI != "/" { |
|
ctx.Redirect(setting.AppSubUrl + "/") |
|
return |
|
} |
|
|
|
if !options.SignOutRequire && !options.DisableCsrf && ctx.Req.Method == "POST" { |
|
csrf.Validate(ctx.Context, ctx.csrf) |
|
if ctx.Written() { |
|
return |
|
} |
|
} |
|
|
|
if options.SignInRequire { |
|
if !ctx.IsSigned { |
|
// Ignore watch repository operation. |
|
if strings.HasSuffix(ctx.Req.RequestURI, "watch") { |
|
return |
|
} |
|
ctx.SetCookie("redirect_to", "/"+url.QueryEscape(setting.AppSubUrl+ctx.Req.RequestURI)) |
|
ctx.Redirect(setting.AppSubUrl + "/user/login") |
|
return |
|
} else if !ctx.User.IsActive && setting.Service.RegisterEmailConfirm { |
|
ctx.Data["Title"] = ctx.Tr("auth.active_your_account") |
|
ctx.HTML(200, "user/auth/activate") |
|
return |
|
} |
|
} |
|
|
|
if options.AdminRequire { |
|
if !ctx.User.IsAdmin { |
|
ctx.Error(403) |
|
return |
|
} |
|
ctx.Data["PageIsAdmin"] = true |
|
} |
|
} |
|
}
|
|
|