SoundSoftware Code Site

  {

    name => 'SoundSoftwareSslRequired',

    req_override => OR_AUTHCFG,

    args_how => TAKE1,

  },

sub SoundSoftwareSslRequired { set_val('SoundSoftwareSslRequired', @_); }

    # We want to delegate most of the work to the authentication

    # handler (to ensure that user is asked to login even for 

    # nonexistent projects -- so they can't tell whether a private

    # project exists or not without authenticating). So 

    # 

    # * if the project is public

    #   - if the method is read-only

    #     + set handler to OK, no auth needed

    #   - if the method is not read-only

    #     + if the repo is read-only, return forbidden

    #     + else require auth

    # * if the project is not public or does not exist

    #     + require auth

    #

    # If we are requiring auth and are not currently https, and

    # https is required, then we must return a redirect to https

    # instead of an OK.

    my $readonly = project_repo_is_readonly($dbh, $project_id, $r);

    if ($status == 1) { # public

	print STDERR "SoundSoftware.pm:$$: Project is public\n";

	if (!defined $read_only_methods{$method}) {

	    print STDERR "SoundSoftware.pm:$$: Method is not read-only\n";

	    if ($readonly) {

		print STDERR "SoundSoftware.pm:$$: Project repo is read-only, refusing access\n";

		return FORBIDDEN;

	    } else {

		print STDERR "SoundSoftware.pm:$$: Project repo is read-write, auth required\n";

		# fall through, this is the normal case

	    }

	} else {

	    # Public project, read-only method -- this is the only

	    # case we can decide for certain to accept in this function

	    print STDERR "SoundSoftware.pm:$$: Method is read-only, no restriction here\n";

	    $r->set_handlers(PerlAuthenHandler => [\&OK]);

	    return OK;

	}

    } else { # status != 1, i.e. nonexistent or private -- equivalent here

	print STDERR "SoundSoftware.pm:$$: Project is private or nonexistent, auth required\n";

	# fall through

    if ($cfg->{SoundSoftwareSslRequired} eq "on") {

	if ($r->dir_config('HTTPS') eq "on") {

	    return OK;

	} else {

	    my $redir_to = "https://" . $r->hostname() . $r->unparsed_uri();

	    print STDERR "SoundSoftware.pm:$$: Need to switch to HTTPS, redirecting to $redir_to\n";

	    $r->header_out(Location => $redir_to);

	    return REDIRECT;

	}

    } else if ($cfg->{SoundSoftwareSslRequired} eq "off") {

	return OK;

    } else {

	print STDERR "WARNING: SoundSoftware.pm:$$: SoundSoftwareSslRequired should be either 'on' or 'off'\n";

	return OK;

    }

    my $status = get_project_status($dbh, $project_id, $r);

    if ($status == 0) {

	# nonexistent, behave like private project you aren't a member of

	print STDERR "SoundSoftware.pm:$$: Project doesn't exist, not permitted\n";

	$dbh->disconnect();

	undef $dbh;

	$r->note_auth_failure();

	return AUTH_REQUIRED;

    }