git.m6w6.name Git - pharext/pharext.org/blob - app/Controller/Github/Hook/Receive.php

   1 <?php
   2
   3 namespace app\Controller\Github\Hook;
   4
   5 use app\Controller;
   6 use app\Github\API;
   7 use app\Model\Accounts;
   8 use app\Web;
   9 use http\Params;
  10 use pharext\Task;
  11 use pharext\Metadata;
  12 use pharext\SourceDir;
  13
  14 class Receive implements Controller
  15 {
  16         private $app;
  17         private $github;
  18         private $accounts;
  19
  20         function __construct(Web $app, API $github, Accounts $accounts) {
  21                 $this->app = $app;
  22                 $this->github = $github;
  23                 $this->accounts = $accounts;
  24         }
  25
  26         function __invoke(array $args = []) {
  27                 $request = $this->app->getRequest();
  28                 $response = $this->app->getResponse();
  29
  30                 if (!($sig = $request->getHeader("X-Hub-Signature")) || !($evt = $request->getHeader("X-Github-Event"))) {
  31                         $response->setResponseCode(400);
  32                         $response->setContentType("message/http");
  33                         $response->getBody()->append($request);
  34                 } else {
  35                         $key = $this->github->getConfig()->client->secret;
  36                         foreach ((new Params($sig))->params as $algo => $mac) {
  37                                 if ($mac["value"] !== hash_hmac($algo, $request->getBody(), $key)) {
  38                                         $response->setResponseCode(403);
  39                                         $response->getBody()->append("Invalid signature");
  40                                         return;
  41                                 }
  42                         }
  43                 }
  44
  45                 switch ($evt) {
  46                         default:
  47                                 $response->setResponseCode(202);
  48                                 $response->getBody()->append("Not a configured event");
  49                                 break;
  50                         case "ping";
  51                                 $response->setResponseCode(204);
  52                                 $response->setResponseStatus("PONG");
  53                                 break;
  54                         case "create":
  55                         case "release":
  56                                 if (($json = json_decode($request->getBody()))) {
  57                                         $this->$evt($json);
  58                                 } else {
  59                                         $response->setResponseCode(415);
  60                                         $response->setContentType($request->getHeader("Content-Type"));
  61                                         $response->getBody()->append($request->getBody());
  62                                 }
  63                                 break;
  64                 }
  65         }
  66
  67         function release($release) {
  68                 if ($release->action !== "published") {
  69                         $response = $this->app->getResponse();
  70
  71                         $response->setResponseCode(202);
  72                         $response->getBody()->append("Not published");
  73                         return;
  74                 }
  75
  76                 $this->uploadAssetForRelease($release->release, $release->repository);
  77         }
  78
  79         private function uploadAssetForRelease($release, $repo) {
  80                 $this->setTokenForUser($repo->owner->login);
  81                 $this->github->listHooks($repo->full_name, function($hooks) use($release, $repo) {
  82                         $repo->hooks = $hooks;
  83                         $asset = $this->createReleaseAsset($release, $repo);
  84                         $name = sprintf("%s-%s.ext.phar", $repo->name, $release->tag_name);
  85                         $url = uri_template($release->upload_url, compact("name"));
  86                         $this->github->createReleaseAsset($url, $asset, "application/phar", function($json) {
  87                                 $response = $this->app->getResponse();
  88                                 $response->setResponseCode(201);
  89                                 $response->setHeader("Location", $json->url);
  90                         });
  91                 })->send();
  92         }
  93
  94         private function createReleaseAsset($release, $repo) {
  95                 $dir = (new Task\GitClone($repo->clone_url, $release->tag_name))->run();
  96                 $src = new SourceDir\Git($dir);
  97                 $meta = Metadata::all() + [
  98                         "name" => $repo->name,
  99                         "release" => $release->tag_name,
 100                         "license" => $src->getLicense(),
 101                         "stub" => "pharext_installer.php",
 102                         "type" => false ? "zend_extension" : "extension",
 103                 ];
 104                 $file = (new Task\PharBuild($src, $meta))->run();
 105                 return $file;
 106         }
 107
 108         function create($create) {
 109                 if ($create->ref_type !== "tag") {
 110                         $response = $this->app->getResponse();
 111
 112                         $response->setResponseCode(202);
 113                         $response->getBody()->append("Not a tag");
 114                         return;
 115                 }
 116
 117                 $this->createReleaseFromTag($create->ref, $create->repository);
 118         }
 119
 120         private function setTokenForUser($login) {
 121                 $relations = [
 122                         $this->accounts->getTokens()->getRelation("accounts"),
 123                         $this->accounts->getOwners()->getRelation("accounts")
 124                 ];
 125                 $tokens = $this->accounts->getTokens()->with($relations, [
 126                         "login=" => $login,
 127                         "tokens.authority=" => "github",
 128                 ]);
 129
 130                 if (count($tokens)) {
 131                         $this->github->setToken($tokens->current()->token->get());
 132                 }
 133         }
 134
 135         private function createReleaseFromTag($tag, $repo) {
 136                 $this->setTokenForUser($repo->owner->login);
 137                 $this->github->createRelease($repo->full_name, $tag, function($json) {
 138                         $response = $this->app->getResponse();
 139                         $response->setResponseCode(201);
 140                         $response->setHeader("Location", $json->url);
 141                 })->send();
 142         }
 143 }