79 lines
1.7 KiB
Go
79 lines
1.7 KiB
Go
|
package client
|
||
|
|
|
||
|
|
import (
|
||
|
|
"encoding/json"
|
||
|
|
"errors"
|
||
|
|
"fmt"
|
||
|
|
"net/http"
|
||
|
|
"net/url"
|
||
|
|
"strings"
|
||
|
|
)
|
||
|
|
|
||
|
|
type tokenResponse struct {
|
||
|
|
Token string `json:"token"`
|
||
|
|
}
|
||
|
|
|
||
|
|
func getToken(creds CredentialStore, params map[string]string, client *http.Client) (token string, err error) {
|
||
|
|
realm, ok := params["realm"]
|
||
|
|
if !ok {
|
||
|
|
return "", errors.New("no realm specified for token auth challenge")
|
||
|
|
}
|
||
|
|
|
||
|
|
realmURL, err := url.Parse(realm)
|
||
|
|
if err != nil {
|
||
|
|
return "", fmt.Errorf("invalid token auth challenge realm: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
// TODO(dmcgowan): Handle empty scheme
|
||
|
|
|
||
|
|
req, err := http.NewRequest("GET", realmURL.String(), nil)
|
||
|
|
if err != nil {
|
||
|
|
return "", err
|
||
|
|
}
|
||
|
|
|
||
|
|
reqParams := req.URL.Query()
|
||
|
|
service := params["service"]
|
||
|
|
scope := params["scope"]
|
||
|
|
|
||
|
|
if service != "" {
|
||
|
|
reqParams.Add("service", service)
|
||
|
|
}
|
||
|
|
|
||
|
|
for _, scopeField := range strings.Fields(scope) {
|
||
|
|
reqParams.Add("scope", scopeField)
|
||
|
|
}
|
||
|
|
|
||
|
|
if creds != nil {
|
||
|
|
username, password := creds.Basic(realmURL)
|
||
|
|
if username != "" && password != "" {
|
||
|
|
reqParams.Add("account", username)
|
||
|
|
req.SetBasicAuth(username, password)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
req.URL.RawQuery = reqParams.Encode()
|
||
|
|
|
||
|
|
resp, err := client.Do(req)
|
||
|
|
if err != nil {
|
||
|
|
return "", err
|
||
|
|
}
|
||
|
|
defer resp.Body.Close()
|
||
|
|
|
||
|
|
if resp.StatusCode != http.StatusOK {
|
||
|
|
return "", fmt.Errorf("token auth attempt for registry: %s request failed with status: %d %s", req.URL, resp.StatusCode, http.StatusText(resp.StatusCode))
|
||
|
|
}
|
||
|
|
|
||
|
|
decoder := json.NewDecoder(resp.Body)
|
||
|
|
|
||
|
|
tr := new(tokenResponse)
|
||
|
|
if err = decoder.Decode(tr); err != nil {
|
||
|
|
return "", fmt.Errorf("unable to decode token response: %s", err)
|
||
|
|
}
|
||
|
|
|
||
|
|
if tr.Token == "" {
|
||
|
|
return "", errors.New("authorization server did not include a token in the response")
|
||
|
|
}
|
||
|
|
|
||
|
|
return tr.Token, nil
|
||
|
|
}
|