package github import ( "encoding/json" "errors" "fmt" "io/ioutil" "net/http" "strings" "github.com/golang/glog" "github.com/openshift/origin/pkg/build/api" "github.com/openshift/origin/pkg/build/webhook" ) // GitHubWebHook used for processing github webhook requests. type GitHubWebHook struct{} // New returns github webhook plugin. func New() *GitHubWebHook { return &GitHubWebHook{} } type gitHubCommit struct { ID string `json:"id,omitempty" yaml:"id,omitempty"` Author api.SourceControlUser `json:"author,omitempty" yaml:"author,omitempty"` Committer api.SourceControlUser `json:"committer,omitempty" yaml:"committer,omitempty"` Message string `json:"message,omitempty" yaml:"message,omitempty"` } type gitHubPushEvent struct { Ref string `json:"ref,omitempty" yaml:"ref,omitempty"` After string `json:"after,omitempty" yaml:"after,omitempty"` HeadCommit gitHubCommit `json:"head_commit,omitempty" yaml:"head_commit,omitempty"` } // Extract services webhooks from github.com func (p *GitHubWebHook) Extract(buildCfg *api.BuildConfig, secret, path string, req *http.Request) (build *api.Build, proceed bool, err error) { trigger, ok := webhook.FindTriggerPolicy(api.GithubWebHookType, buildCfg) if !ok { err = fmt.Errorf("BuildConfig %s does not support the Github webhook trigger type", buildCfg.Name) return } if trigger.GithubWebHook.Secret != secret { err = fmt.Errorf("Secret does not match for BuildConfig %s", buildCfg.Name) return } if err = verifyRequest(req); err != nil { return } method := req.Header.Get("X-GitHub-Event") if method != "ping" && method != "push" { err = fmt.Errorf("Unknown X-GitHub-Event %s", method) return } if method == "ping" { proceed = false return } body, err := ioutil.ReadAll(req.Body) if err != nil { return } var event gitHubPushEvent if err = json.Unmarshal(body, &event); err != nil { return } proceed = webhook.GitRefMatches(event.Ref, buildCfg.Parameters.Source.Git.Ref) if !proceed { glog.V(2).Infof("Skipping build for '%s'. Branch reference from '%s' does not match configuration", buildCfg, event) } build = &api.Build{ Parameters: api.BuildParameters{ Source: buildCfg.Parameters.Source, Revision: &api.SourceRevision{ Type: api.BuildSourceGit, Git: &api.GitSourceRevision{ Commit: event.HeadCommit.ID, Author: event.HeadCommit.Author, Committer: event.HeadCommit.Committer, Message: event.HeadCommit.Message, }, }, Strategy: buildCfg.Parameters.Strategy, Output: buildCfg.Parameters.Output, }, } return } func verifyRequest(req *http.Request) error { if method := req.Method; method != "POST" { return fmt.Errorf("Unsupported HTTP method %s", method) } if contentType := req.Header.Get("Content-Type"); contentType != "application/json" { return fmt.Errorf("Unsupported Content-Type %s", contentType) } if userAgent := req.Header.Get("User-Agent"); !strings.HasPrefix(userAgent, "GitHub-Hookshot/") { return fmt.Errorf("Unsupported User-Agent %s", userAgent) } if req.Header.Get("X-GitHub-Event") == "" { return errors.New("Missing X-GitHub-Event") } return nil }