| // Copyright (C) 2015 The Android Open Source Project |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| package com.google.gerrit.gpg.server; |
| |
| import static com.google.gerrit.gpg.PublicKeyStore.keyIdToString; |
| import static com.google.gerrit.server.account.ExternalId.SCHEME_GPGKEY; |
| |
| import com.google.common.io.BaseEncoding; |
| import com.google.gerrit.extensions.restapi.ResourceConflictException; |
| import com.google.gerrit.extensions.restapi.Response; |
| import com.google.gerrit.extensions.restapi.RestModifyView; |
| import com.google.gerrit.gpg.PublicKeyStore; |
| import com.google.gerrit.gpg.server.DeleteGpgKey.Input; |
| import com.google.gerrit.reviewdb.server.ReviewDb; |
| import com.google.gerrit.server.GerritPersonIdent; |
| import com.google.gerrit.server.account.AccountCache; |
| import com.google.gerrit.server.account.ExternalId; |
| import com.google.gerrit.server.account.ExternalIdsUpdate; |
| import com.google.gwtorm.server.OrmException; |
| import com.google.inject.Inject; |
| import com.google.inject.Provider; |
| import java.io.IOException; |
| import org.bouncycastle.openpgp.PGPException; |
| import org.bouncycastle.openpgp.PGPPublicKey; |
| import org.eclipse.jgit.errors.ConfigInvalidException; |
| import org.eclipse.jgit.lib.CommitBuilder; |
| import org.eclipse.jgit.lib.PersonIdent; |
| import org.eclipse.jgit.lib.RefUpdate; |
| |
| public class DeleteGpgKey implements RestModifyView<GpgKey, Input> { |
| public static class Input {} |
| |
| private final Provider<PersonIdent> serverIdent; |
| private final Provider<ReviewDb> db; |
| private final Provider<PublicKeyStore> storeProvider; |
| private final AccountCache accountCache; |
| private final ExternalIdsUpdate.User externalIdsUpdateFactory; |
| |
| @Inject |
| DeleteGpgKey( |
| @GerritPersonIdent Provider<PersonIdent> serverIdent, |
| Provider<ReviewDb> db, |
| Provider<PublicKeyStore> storeProvider, |
| AccountCache accountCache, |
| ExternalIdsUpdate.User externalIdsUpdateFactory) { |
| this.serverIdent = serverIdent; |
| this.db = db; |
| this.storeProvider = storeProvider; |
| this.accountCache = accountCache; |
| this.externalIdsUpdateFactory = externalIdsUpdateFactory; |
| } |
| |
| @Override |
| public Response<?> apply(GpgKey rsrc, Input input) |
| throws ResourceConflictException, PGPException, OrmException, IOException, |
| ConfigInvalidException { |
| PGPPublicKey key = rsrc.getKeyRing().getPublicKey(); |
| externalIdsUpdateFactory |
| .create() |
| .delete( |
| db.get(), |
| rsrc.getUser().getAccountId(), |
| ExternalId.Key.create( |
| SCHEME_GPGKEY, BaseEncoding.base16().encode(key.getFingerprint()))); |
| accountCache.evict(rsrc.getUser().getAccountId()); |
| |
| try (PublicKeyStore store = storeProvider.get()) { |
| store.remove(rsrc.getKeyRing().getPublicKey().getFingerprint()); |
| |
| CommitBuilder cb = new CommitBuilder(); |
| PersonIdent committer = serverIdent.get(); |
| cb.setAuthor(rsrc.getUser().newCommitterIdent(committer.getWhen(), committer.getTimeZone())); |
| cb.setCommitter(committer); |
| cb.setMessage("Delete public key " + keyIdToString(key.getKeyID())); |
| |
| RefUpdate.Result saveResult = store.save(cb); |
| switch (saveResult) { |
| case NO_CHANGE: |
| case FAST_FORWARD: |
| break; |
| case FORCED: |
| case IO_FAILURE: |
| case LOCK_FAILURE: |
| case NEW: |
| case NOT_ATTEMPTED: |
| case REJECTED: |
| case REJECTED_CURRENT_BRANCH: |
| case RENAMED: |
| default: |
| throw new ResourceConflictException("Failed to delete public key: " + saveResult); |
| } |
| } |
| return Response.none(); |
| } |
| } |