Files
ubicloud/routes/github.rb
Jeremy Evans e6b7e5e879 Change rubocop TargetRubyVersion to 3.4
Disable Style/RedundantLineContinuation, as it incorrectly removes
line continutations in rhizome/host/lib/vm_setup.rb that are not
redundant.

All code changes are for _1 => it in blocks.
2025-04-26 06:51:19 +09:00

63 lines
3.5 KiB
Ruby

# frozen_string_literal: true
class Clover
hash_branch("github") do |r|
r.get web?, "callback" do
oauth_code = r.params["code"]
installation_id = r.params["installation_id"]
setup_action = r.params["setup_action"]
code_response = Github.oauth_client.exchange_code_for_token(oauth_code)
if (installation = GithubInstallation[installation_id: installation_id])
@project = installation.project
authorize("Project:github", installation.project.id)
flash["notice"] = "GitHub runner integration is already enabled for #{installation.project.name} project."
Clog.emit("GitHub installation already exists") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "#{installation.project.path}/github"
end
unless (@project = project = Project[session.delete("github_installation_project_id")])
flash["error"] = "You should initiate the GitHub App installation request from the project's GitHub runner integration page."
Clog.emit("GitHub callback failed due to lack of project in the session") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "/project"
end
authorize("Project:github", project.id)
if setup_action == "request"
flash["notice"] = "The GitHub App installation request is awaiting approval from the GitHub organization's administrator. As GitHub will redirect your admin back to the Ubicloud console, the admin needs to have an Ubicloud account with the necessary permissions to finalize the installation. Please invite the admin to your project if they don't have an account yet."
Clog.emit("GitHub installation initiated by non-admin user") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "#{project.path}/user"
end
unless (access_token = code_response[:access_token])
flash["error"] = "GitHub App installation failed. For any questions or assistance, reach out to our team at support@ubicloud.com"
Clog.emit("GitHub callback failed due to lack of permission") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "#{project.path}/github"
end
unless (installation_response = Octokit::Client.new(access_token: access_token).get("/user/installations")[:installations].find { it[:id].to_s == installation_id })
flash["error"] = "GitHub App installation failed. For any questions or assistance, reach out to our team at support@ubicloud.com"
Clog.emit("GitHub callback failed due to lack of installation") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "#{project.path}/github"
end
unless project.active?
flash["error"] = "GitHub runner integration is not allowed for inactive projects"
Clog.emit("GitHub callback failed due to inactive project") { {installation_failed: {id: installation_id, account_ubid: current_account.ubid}} }
r.redirect "#{project.path}/dashboard"
end
GithubInstallation.create_with_id(
installation_id: installation_id,
name: installation_response[:account][:login] || installation_response[:account][:name],
type: installation_response[:account][:type],
project_id: project.id
)
flash["notice"] = "GitHub runner integration is enabled for #{project.name} project."
r.redirect "#{project.path}/github"
end
end
end