git.m6w6.name Git - pharext/pharext.org/blob - app/Controller/Github/Hook.php

   1 <?php
   2
   3 namespace app\Controller\Github;
   4
   5 use app\Controller;
   6 use app\Github\API;
   7 use app\Model\Accounts;
   8 use app\Web;
   9 use http\Params;
  10 use pharext\Task;
  11 use pharext\SourceDir\Git;
  12
  13 require_once __DIR__."/../../../vendor/m6w6/pharext/src/pharext/Version.php";
  14
  15 class Hook implements Controller
  16 {
  17         private $app;
  18         private $github;
  19         private $accounts;
  20
  21         function __construct(Web $app, API $github, Accounts $accounts) {
  22                 $this->app = $app;
  23                 $this->github = $github;
  24                 $this->accounts = $accounts;
  25         }
  26
  27         function __invoke(array $args = []) {
  28                 $request = $this->app->getRequest();
  29                 $response = $this->app->getResponse();
  30
  31                 if (!($sig = $request->getHeader("X-Hub-Signature")) || !($evt = $request->getHeader("X-Github-Event"))) {
  32                         $response->setResponseCode(400);
  33                         $response->setContentType("message/http");
  34                         $response->getBody()->append($request);
  35                 } else {
  36                         $key = $this->github->getConfig()->client->secret;
  37                         foreach ((new Params($sig))->params as $algo => $mac) {
  38                                 if ($mac["value"] !== hash_hmac($algo, $request->getBody(), $key)) {
  39                                         $response->setResponseCode(403);
  40                                         $response->getBody()->append("Invalid signature");
  41                                         return;
  42                                 }
  43                         }
  44                 }
  45
  46                 switch ($evt) {
  47                         default:
  48                                 $response->setResponseCode(202);
  49                                 $response->getBody()->append("Not a configured event");
  50                                 break;
  51                         case "ping";
  52                                 $response->setResponseCode(204);
  53                                 $response->setResponseStatus("PONG");
  54                                 break;
  55                         case "create":
  56                         case "release":
  57                                 if (($json = json_decode($request->getBody()))) {
  58                                         $this->$evt($json);
  59                                 } else {
  60                                         $response->setResponseCode(415);
  61                                         $response->setContentType($request->getHeader("Content-Type"));
  62                                         $response->getBody()->append($request->getBody());
  63                                 }
  64                                 break;
  65                 }
  66         }
  67
  68         function release($release) {
  69                 if ($release->action !== "published") {
  70                         $response = $this->app->getResponse();
  71
  72                         $response->setResponseCode(202);
  73                         $response->getBody()->append("Not published");
  74                         return;
  75                 }
  76
  77                 $this->uploadAssetForRelease($release->release, $release->repository);
  78         }
  79
  80         private function uploadAssetForRelease($release, $repo) {
  81                 $this->setTokenForUser($repo->owner->login);
  82                 $asset = $this->createReleaseAsset($release, $repo);
  83                 // FIXME: use uri_template extension
  84                 $name = sprintf("%s-%s.ext.phar", $repo->name, $release->tag_name);
  85                 $url = str_replace("{?name}", "?name=$name", $release->upload_url);
  86                 $this->github->createReleaseAsset($url, $asset, "application/phar", function($json) {
  87                         $response = $this->app->getResponse();
  88                         $response->setResponseCode(201);
  89                         $response->setHeader("Location", $json->url);
  90                 })->send();
  91         }
  92
  93         private function createReleaseAsset($release, $repo) {
  94                 define("STDERR", fopen("/var/log/apache2/php_errors.log", "a"));
  95                 $source = (new Task\GitClone($repo->clone_url, $release->tag_name))->run();
  96                 $iterator = new Git($source);
  97                 $meta = [
  98                         "header" => sprintf("pharext v%s (c) Michael Wallner <mike@php.net>", \pharext\VERSION),
  99                         "version" => \pharext\VERSION,
 100                         "date" => date("Y-m-d"),
 101                         "name" => $repo->name,
 102                         "release" => $release->tag_name,
 103                         "license" => @file_get_contents(current(glob($iterator->getBaseDir()."/LICENSE*"))),
 104                         "stub" => "pharext_installer.php",
 105                         "type" => false ? "zend_extension" : "extension",
 106                 ];
 107                 $file = (new Task\PharBuild($iterator, $meta))->run();
 108                 return $file;
 109         }
 110
 111         function create($create) {
 112                 if ($create->ref_type !== "tag") {
 113                         $response = $this->app->getResponse();
 114
 115                         $response->setResponseCode(202);
 116                         $response->getBody()->append("Not a tag");
 117                         return;
 118                 }
 119
 120                 $this->createReleaseFromTag($create->ref, $create->repository);
 121         }
 122
 123         private function setTokenForUser($login) {
 124                 $relations = [
 125                         $this->accounts->getTokens()->getRelation("accounts"),
 126                         $this->accounts->getOwners()->getRelation("accounts")
 127                 ];
 128                 $tokens = $this->accounts->getTokens()->with($relations, [
 129                         "login=" => $login,
 130                         "tokens.authority=" => "github",
 131                 ]);
 132
 133                 if (count($tokens)) {
 134                         $this->github->setToken($tokens->current()->token->get());
 135                 }
 136         }
 137
 138         private function createReleaseFromTag($tag, $repo) {
 139                 $this->setTokenForUser($repo->owner->login);
 140                 $this->github->createRelease($repo->full_name, $tag, function($json) {
 141                         $response = $this->app->getResponse();
 142                         $response->setResponseCode(201);
 143                         $response->setHeader("Location", $json->url);
 144                 })->send();
 145         }
 146 }