cgi/reguser.cgi

   1 #!/usr/bin/perl
   2 # (c) Petr Baudis <pasky@suse.cz>
   3 # GPLv2
   4
   5 use strict;
   6 use warnings;
   7
   8 use lib ".";
   9 use Girocco::CGI;
  10 use Girocco::Config;
  11 use Girocco::User;
  12 use Girocco::Util;
  13
  14 my $gcgi = Girocco::CGI->new('User Registration');
  15 my $cgi = $gcgi->cgi;
  16
  17 unless ($Girocco::Config::manage_users) {
  18         print "<p>I don't manage users.</p>";
  19         exit;
  20 }
  21
  22 if ($cgi->param('mail')) {
  23         print "<p>Go away, bot.</p>";
  24         exit;
  25 }
  26
  27 my $y0 = $cgi->param('y0') || '';
  28 if ($cgi->param('name') && $y0 eq 'Register' && $cgi->request_method eq 'POST') {
  29         # submitted, let's see
  30         # FIXME: racy, do a lock
  31         my $name = $gcgi->wparam('name');
  32         Girocco::User::valid_name($name)
  33                 and Girocco::User::does_exist($name)
  34                 and $gcgi->err("User with that name already exists.");
  35
  36         my $user = Girocco::User->ghost($name);
  37         if ($user->cgi_fill($gcgi)) {
  38                 $user->conjure;
  39                 my $keysdiv = '';
  40                 my $keylist = $user->keys_html_list;
  41                 if ($keylist) {
  42                         $keysdiv = <<EOT;
  43
  44 <div id="keys"><p>The following keys have been registered for user $name as
  45 shown below along with their <tt>ssh-keygen -l</tt> fingerprint:</p>
  46 $keylist</div>
  47 EOT
  48                 }
  49                 print <<EOT;
  50 <p>User $name successfully registered.</p>
  51 <p>Project administrators can now give you push access to their projects.</p>
  52 <p>Congratulations, and have a lot of fun!</p>$keysdiv
  53 EOT
  54                 exit;
  55         }
  56 }
  57
  58 my $httpspara = '';
  59 $httpspara = <<EOT if $Girocco::Config::httpspushurl;
  60 <p>Please be sure to include at least one RSA key (starts with the <tt>ssh-rsa</tt> prefix) in
  61 order to enable HTTPS pushing. <sup><a href="@{[url_path($Girocco::Config::htmlurl)]}/httpspush.html">(learn more)</a></sup><br />
  62 X.509 (e.g. OpenSSL) format public keys can be converted to SSH .pub format with the
  63 <a href="http://repo.or.cz/w/ezcert.git/blob/master:/ConvertPubKey">ConvertPubKey</a> utility thus obviating the
  64 need for OpenSSH if all pushing is to be done using HTTPS (see the example in the TIPS section of the <tt>ConvertPubKey -h</tt> output).</p>
  65 EOT
  66 print <<EOT;
  67 <p>Here you can register a user.
  68 You need to register a user so that you can push to the hosted projects.</p>
  69 <p>SSH (the <tt>ssh</tt> protocol) or HTTPS is used for pushing, your SSH key authenticates you -
  70 there is no password (though we recommend that your SSH key is password-protected;
  71 use <code>ssh-agent</code> to help your fingers).
  72 You can find your public key in <tt>~/.ssh/id_rsa.pub</tt> or <tt>~/.ssh/id_dsa.pub</tt>.
  73 If you do not have any yet, generate it using the <code>ssh-keygen</code> command.
  74 You can paste multiple keys in the box below, each on a separate line.
  75 Paste each key <em>including</em> the <tt>ssh-</tt>whatever prefix and email-like postfix.</p>
  76 $httpspara<p>We won't bother to verify your email contact,
  77 but fill in something sensible in your own interest
  78 so that we may contact you or confirm your identity should the need arise.
  79 We also need to send you an e-mail if you want to update your SSH keys later.</p>
  80 $Girocco::Config::legalese
  81 <form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/reguser.cgi">
  82 <table class="form">
  83 <tr><td class="formlabel">Login:</td><td><input type="text" name="name" /></td></tr>
  84 <tr><td class="formlabel">Email:</td><td><input type="text" name="email" /></td></tr>
  85 <tr><td class="formlabel">Public SSH key(s):</td><td><textarea wrap="off" name="keys" rows="5" cols="80"></textarea></td></tr>
  86 <tr style="display:none"><td class="formlabel">Anti-captcha (leave empty!):</td><td><input type="text" name="mail" /></td></tr>
  87 <tr><td class="formlabel"></td><td><input type="submit" name="y0" value="Register" /></td></tr>
  88 </table>
  89 </form>
  90 EOT