owner_tokens_dir.go

package util

import (
	"os"
	"path/filepath"
	"strings"

	"github.com/pkg/errors"
	"github.com/sirupsen/logrus"
)

// OwnerTokensDir handles finding owner based tokens in a directory for GitHub Apps
type OwnerTokensDir struct {
	gitServer string
	dir       string
}

// NewOwnerTokensDir creates a new dir token scanner
func NewOwnerTokensDir(gitServer, dir string) *OwnerTokensDir {
	return &OwnerTokensDir{gitServer, dir}
}

// FindToken finds the token for the given owner
func (o *OwnerTokensDir) FindToken(owner string) (string, error) {
	dir := o.dir
	ownerURL := URLJoin(o.gitServer, owner)
	prefix := ownerURL + "="
	files, err := os.ReadDir(dir)
	if err != nil {
		return "", errors.Wrapf(err, "failed to list files in dir %s", dir)
	}
	for _, f := range files {
		localName := f.Name()
		if f.IsDir() || localName == "username" || strings.HasPrefix(localName, ".") {
			continue
		}
		name := filepath.Join(dir, localName)

		logrus.Tracef("loading file %s", name)
		/* #nosec */
		data, err := os.ReadFile(name)
		if err != nil {
			return "", errors.Wrapf(err, "failed to load file %s", name)
		}
		text := strings.TrimSpace(string(data))
		if strings.HasPrefix(text, prefix) {
			return strings.TrimPrefix(text, prefix), nil
		}
	}
	return "", errors.Errorf("no github app secret found for owner URL %s", ownerURL)
}