DiffusionGitLFSTemporaryTokenType.php
2ea3a65693e3production

DiffusionGitLFSTemporaryTokenType.php
View Options

			<?php

			final class DiffusionGitLFSTemporaryTokenType
			extends PhabricatorAuthTemporaryTokenType {

			const TOKENTYPE = 'diffusion.git.lfs';
			const HTTP_USERNAME = '@git-lfs';

			public function getTokenTypeDisplayName() {
			return pht('Git Large File Storage');
			}

			public function getTokenReadableTypeName(
			PhabricatorAuthTemporaryToken $token) {
			return pht('Git LFS Token');
			}

			public static function newHTTPAuthorization(
			PhabricatorRepository $repository,
			PhabricatorUser $viewer,
			$operation) {

			$lfs_user = self::HTTP_USERNAME;
			$lfs_pass = Filesystem::readRandomCharacters(32);
			$lfs_hash = PhabricatorHash::weakDigest($lfs_pass);

			$ttl = PhabricatorTime::getNow() + phutil_units('1 day in seconds');

			$token = id(new PhabricatorAuthTemporaryToken())
			->setTokenResource($repository->getPHID())
			->setTokenType(self::TOKENTYPE)
			->setTokenCode($lfs_hash)
			->setUserPHID($viewer->getPHID())
			->setTemporaryTokenProperty('lfs.operation', $operation)
			->setTokenExpires($ttl)
			->save();

			$authorization_header = base64_encode($lfs_user.':'.$lfs_pass);
			return 'Basic '.$authorization_header;
			}

			}