cgi/reguser.cgi

   1 #!/usr/bin/perl
   2 # (c) Petr Baudis <pasky@suse.cz>
   3 # GPLv2
   4
   5 use strict;
   6 use warnings;
   7
   8 use lib "__BASEDIR__";
   9 use Girocco::CGI;
  10 use Girocco::Config;
  11 use Girocco::User;
  12 use Girocco::Util;
  13
  14 my $gcgi = Girocco::CGI->new('User Registration');
  15 my $cgi = $gcgi->cgi;
  16
  17 unless ($Girocco::Config::manage_users) {
  18         print "<p>I don't manage users.</p>";
  19         exit;
  20 }
  21
  22 if ($cgi->param('mail')) {
  23         print "<p>Go away, bot.</p>";
  24         exit;
  25 }
  26
  27 my $y0 = $cgi->param('y0') || '';
  28 if ($cgi->param('name') && $y0 eq 'Register' && $cgi->request_method eq 'POST') {
  29         # submitted, let's see
  30         # FIXME: racy, do a lock
  31         my $name = $gcgi->wparam('name');
  32         if (!Girocco::User::valid_name($name)) {
  33                 my $htmlname = html_esc($name);
  34                 $gcgi->err(
  35                         "Invalid user name \"$htmlname\" ".
  36                         "(contains bad characters or is a reserved user name). ".
  37                         "See <a href=\"@{[url_path($Girocco::Config::htmlurl)]}/names.html#user\">names</a>.");
  38                 $gcgi->err_check;
  39         } elsif (Girocco::User::does_exist($name)) {
  40                 $gcgi->err("A user with that name already exists.");
  41                 $gcgi->err_check;
  42         } else {
  43                 my $user = Girocco::User->ghost($name);
  44                 if ($user->cgi_fill($gcgi)) {
  45                         $user->conjure;
  46                         my $keysdiv = '';
  47                         my $keylist = $user->keys_html_list;
  48                         if ($keylist) {
  49                                 $keysdiv = <<EOT;
  50
  51 <div id="keys"><p>The following keys have been registered for user $name as
  52 shown below along with their <tt>ssh-keygen -l -E md5</tt> fingerprint:</p>
  53 $keylist</div>
  54 EOT
  55                         }
  56                         print <<EOT;
  57 <p>User $name successfully registered.</p>
  58 <p>Project administrators can now give you push access to their projects.</p>
  59 <p>Congratulations, and have a lot of fun!</p>$keysdiv
  60 EOT
  61                         exit;
  62                 }
  63         }
  64 }
  65
  66 my $httpspara = '';
  67 $httpspara = <<EOT if $Girocco::Config::httpspushurl;
  68 <p>Please be sure to include at least one RSA key (starts with the <tt>ssh-rsa</tt> prefix) in
  69 order to enable HTTPS pushing. <sup class="sup"><span><a href="@{[url_path($Girocco::Config::htmlurl)]}/httpspush.html">(learn more)</a></span></sup><br />
  70 X.509 (e.g. OpenSSL) format public keys can be converted to SSH .pub format with the
  71 <a href="http://repo.or.cz/w/ezcert.git/blob/master:/ConvertPubKey">ConvertPubKey</a> utility thus obviating the
  72 need for OpenSSH if all pushing is to be done using HTTPS (see the example in the TIPS section of the <tt>ConvertPubKey -h</tt> output).</p>
  73 EOT
  74 my $dsablurb = '';
  75 $dsablurb = ' or <tt>~/.ssh/id_dsa.pub</tt>' unless $Girocco::Config::disable_dsa;
  76 print <<EOT;
  77 <p>Here you can register a user.
  78 You need to register a user so that you can push to the hosted projects.</p>
  79 <p>If you already have a user account you may
  80 <a href="@{[url_path($Girocco::Config::webadmurl)]}/edituser.cgi">edit user</a> instead.</p>
  81 <p>SSH (the <tt>ssh</tt> protocol) or HTTPS is used for pushing, your SSH key authenticates you -
  82 there is no password (though we recommend that your SSH key is password-protected;
  83 use <code>ssh-agent</code> to help your fingers).
  84 You can find your public key in <tt>~/.ssh/id_rsa.pub</tt>$dsablurb.
  85 If you do not have any yet, generate it using the <code>ssh-keygen</code> command.
  86 You can paste multiple keys in the box below, each on a separate line.
  87 Paste each key <em>including</em> the <tt>ssh-</tt>whatever prefix and email-like postfix.</p>
  88 $httpspara<p>We won't bother to verify your email contact,
  89 but fill in something sensible in your own interest
  90 so that we may contact you or confirm your identity should the need arise.
  91 We also need to send you an e-mail if you want to update your SSH keys later.</p>
  92 $Girocco::Config::legalese
  93 <form method="post" action="@{[url_path($Girocco::Config::webadmurl)]}/reguser.cgi">
  94 <table class="form">
  95 <tr><td class="formlabel">Login:</td><td><input type="text" name="name" /></td></tr>
  96 <tr><td class="formlabel">Email:</td><td><input type="text" name="email" /></td></tr>
  97 <tr><td class="formlabel">Public SSH key(s):</td><td><textarea wrap="off" name="keys" rows="5" cols="80"></textarea></td></tr>
  98 <tr style="display:none"><td class="formlabel">Anti-captcha (leave empty!):</td><td><input type="text" name="mail" /></td></tr>
  99 <tr><td class="formlabel"></td><td><input type="submit" name="y0" value="Register" /></td></tr>
 100 </table>
 101 </form>
 102 EOT