19c8ecdca2f9a98423d0321025dbda7eb271bd06
2 # (c) Petr Baudis <pasky@suse.cz>
3 # (c) Jan Krueger <jk@jk.gs>
15 my $gcgi = Girocco
::CGI
->new('User Email & SSH Key Update');
18 unless ($Girocco::Config
::manage_users
) {
19 print "<p>I don't manage users.</p>";
23 if ($cgi->param('mail')) {
24 print "<p>Go away, bot.</p>";
32 $fields = '' if (!$fields);
34 my $authtag = ($auth ?
qq(<input type
="hidden" name
="auth" value
="$auth" />) :
35 qq(<p
>Authorization code
: <input name
="auth" size
="50" /></p>));
38 <form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi">
39 <input type="hidden" name="name" value="$name" />
41 $fields<p><input type="submit" name="y0" value="$submit" /></p>
46 my $y0 = $cgi->param('y0');
48 if ($cgi->param('name') && $y0 && $cgi->request_method eq 'POST') {
49 # submitted, let's see
50 # FIXME: racy, do a lock
51 my $name = $gcgi->wparam('name');
52 (Girocco
::User
::valid_name
($name)
53 and Girocco
::User
::does_exist
($name))
54 or $gcgi->err("Username is not registered.");
56 $gcgi->err_check and exit;
59 ($user = Girocco
::User
->load($name)) && valid_email
($user->{email
})
60 or $gcgi->err("Username may not be updated.");
62 $gcgi->err_check and exit;
64 if (!$cgi->param('auth')) {
65 if ($y0 ne 'Send authorization code') {
66 print "<p>Invalid data. Go away, sorcerer.</p>\n";
70 my $auth = $user->gen_auth;
73 open(MAIL
, '|-', '/usr/bin/mail', '-s', "[$Girocco::Config::name] Account update authorization", $user->{email
}) or
74 die "Sorry, could not send authorization code: $!";
78 you have requested an authorization code to be sent to you for updating
79 your account's email and/or SSH keys. If you don't want to actually update
80 your email or SSH keys, just ignore this e-mail. Otherwise, use this code
85 Should you run into any problems, please let us know.
91 print "<p>You should shortly receive an e-mail containing an authorization code.
92 Please enter this code below to update your SSH keys.
93 The code will expire in 24 hours or after you have used it.</p>";
94 _auth_form
($name, "'Login'");
97 $user->{auth
} && $user->{authtype
} ne 'DEL' or do {
98 print "<p>There currently isn't any authorization code filed under your account. ".
99 "Please <a href=\"@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi\">generate one</a>.</p>";
104 my $email = $cgi->param('email');
105 my $keys = $cgi->param('keys');
107 my $auth = $gcgi->wparam('auth');
108 if ($auth ne $user->{auth
}) {
109 print "<p>Invalid authorization code, please re-enter or ".
110 "<a href=\"@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi\">generate a new one</a>.</p>";
111 _auth_form
($name, "'Login'");
115 if (defined($email) && defined($keys)) {
116 if ($y0 ne 'Update') {
117 print "<p>Invalid data. Go away, sorcerer.</p>\n";
121 # Auth valid, keys given -> save
122 if (($email eq $user->{email
} || $user->update_email($gcgi, $email)) && $user->keys_fill($gcgi)) {
125 print "<p>Your Email & SSH keys have been updated.</p>";
126 my $keylist = $user->keys_html_list;
130 <div id="keys"><p>The following keys have been registered for user $name as
131 shown below along with their <tt>ssh-keygen -l</tt> fingerprint:</p>
139 # Otherwise pre-fill fields
140 $email = $user->{email
};
141 $keys = $user->{keys};
144 if ($y0 ne "'Login'") {
145 print "<p>Invalid data. Go away, sorcerer.</p>\n";
150 $httpspara = <<EOT if $Girocco::Config::httpspushurl;
151 <p>Please be sure to include at least one RSA key (starts with the <tt>ssh-rsa</tt> prefix) in
152 order to enable HTTPS pushing. <sup><a href="@{[url_path($Girocco::Config::htmlurl)]}/httpspush.html">(learn more)</a></sup><br />
153 X.509 (e.g. OpenSSL) format public keys can be converted to SSH .pub format with the
154 <a href="http://repo.or.cz/w/ezcert.git/blob/master:/ConvertPubKey">ConvertPubKey</a> utility thus obviating the
155 need for OpenSSH if all pushing is to be done using HTTPS (see the example in the TIPS section of the <tt>ConvertPubKey -h</tt> output).</p>
157 my $emailval = CGI
::escapeHTML
($email);
158 my $keysval = CGI
::escapeHTML
($keys);
160 <p>Authorization code validated (for now).</p>
161 <p>SSH (the <tt>ssh</tt> protocol) or HTTPS is used for pushing, your SSH key authenticates you -
162 there is no password (though we recommend that your SSH key is password-protected;
163 use <code>ssh-agent</code> to help your fingers).
164 You can find your public key in <tt>~/.ssh/id_rsa.pub</tt> or <tt>~/.ssh/id_dsa.pub</tt>.
165 If you do not have any yet, generate it using the <code>ssh-keygen</code> command.</p>
166 <p>You can paste multiple keys in the box below, each on a separate line.
167 Paste each key <em>including</em> the <tt>ssh-</tt>whatever prefix and email-like postfix.</p>
168 $httpspara<form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi">
169 <input type="hidden" name="name" value="$name" />
170 <input type="hidden" name="auth" value="$auth" />
172 <tr><td class="formlabel">Login:</td><td class="formdata">$name</td></tr>
173 <tr><td class="formlabel">Email:</td><td><input type="text" name="email" value="$emailval"/></td></tr>
174 <tr><td class="formlabel">Public SSH key(s):</td><td><textarea wrap="off" name="keys" rows="5" cols="80">$keysval</textarea></td></tr>
175 <tr><td class="formlabel"></td><td><input type="submit" name="y0" value="Update" /></td></tr>
178 my $keylist = $user->keys_html_list;
182 <div id="keys"><p>The following keys are currently registered for user $name as
183 shown below along with their <tt>ssh-keygen -l</tt> fingerprint:</p>
193 $blurb1 = 'SSH (the <tt>ssh</tt> protocol)'
194 if $Girocco::Config
::pushurl
&& !$Girocco::Config
::httpspushurl
;
195 $blurb1 = 'HTTPS (the <tt>https</tt> protocol)'
196 if !$Girocco::Config
::pushurl
&& $Girocco::Config
::httpspushurl
;
197 $blurb1 = 'SSH (the <tt>ssh</tt> protocol) or HTTPS (the <tt>https</tt> protocol)'
198 if $Girocco::Config
::pushurl
&& $Girocco::Config
::httpspushurl
;
200 $blurb2 = ' and download https push user authentication certificate(s)'
201 if $Girocco::Config
::httpspushurl
;
203 <p>Here you may update the email and public SSH key(s) associated with your user account$blurb2.
204 You may <a href="@{[url_path($Girocco::Config::webadmurl)]}/deluser.cgi">request an authorization
205 code in order to remove your user account from this site</a>.</p>
206 <p>The public SSH key(s) are required for you to push to projects.
207 $blurb1 is used for pushing, your SSH key authenticates you -
208 there is no password (though we recommend that your SSH key is password-protected;
209 use <code>ssh-agent</code> to help your fingers).
210 You can find your public key in <tt>~/.ssh/id_rsa.pub</tt> or <tt>~/.ssh/id_dsa.pub</tt>.
211 If you do not have any yet, generate it using the <code>ssh-keygen</code> command.</p>
213 <p>Please enter your username below;
214 we will send you an email with an authorization code
215 and further instructions.</p>
217 <form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi">
219 <tr><td class="formlabel">Login:</td><td><input type="text" name="name" /></td></tr>
220 <tr style="display:none"><td class="formlabel">Anti-captcha (leave empty!):</td><td><input type="text" name="mail" /></td></tr>
221 <tr><td class="formlabel"></td><td><input type="submit" name="y0" value="Send authorization code" /></td></tr>