Differential D25040 Diff 97 src/applications/conduit/controller/PhabricatorConduitAPIController.php

Changeset View

Standalone View

src/applications/conduit/controller/PhabricatorConduitAPIController.php

Show First 20 Lines • Show All 255 Lines • ▼ Show 20 Lines	if ($auth_type === ConduitClient::AUTH_ASYMMETRIC) {
'trusted keys can be used to sign API calls.'),		'trusted keys can be used to sign API calls.'),
);		);
}		}

if (!PhabricatorEnv::isClusterRemoteAddress()) {		if (!PhabricatorEnv::isClusterRemoteAddress()) {
return array(		return array(
'ERR-INVALID-AUTH',		'ERR-INVALID-AUTH',
pht(		pht(
'This request originates from outside of the Phabricator '.		'This request originates from outside of the cluster address '.
'cluster address range. Requests signed with trusted '.		'range. Requests signed with trusted device keys must '.
'device keys must originate from within the cluster.'),		'originate from within the cluster.'),
);		);
}		}

$user = PhabricatorUser::getOmnipotentUser();		$user = PhabricatorUser::getOmnipotentUser();

// Flag this as an intracluster request.		// Flag this as an intracluster request.
$api_request->setIsClusterRequest(true);		$api_request->setIsClusterRequest(true);
}		}
▲ Show 20 Lines • Show All 84 Lines • ▼ Show 20 Lines	if (strlen($token_string)) {

// If this is a "clr-" token, Phabricator must be configured in cluster		// If this is a "clr-" token, Phabricator must be configured in cluster
// mode and the remote address must be a cluster node.		// mode and the remote address must be a cluster node.
if ($token->getTokenType() == PhabricatorConduitToken::TYPE_CLUSTER) {		if ($token->getTokenType() == PhabricatorConduitToken::TYPE_CLUSTER) {
if (!PhabricatorEnv::isClusterRemoteAddress()) {		if (!PhabricatorEnv::isClusterRemoteAddress()) {
return array(		return array(
'ERR-INVALID-AUTH',		'ERR-INVALID-AUTH',
pht(		pht(
'This request originates from outside of the Phabricator '.		'This request originates from outside of the cluster address '.
'cluster address range. Requests signed with cluster API '.		'range. Requests signed with cluster API tokens must '.
'tokens must originate from within the cluster.'),		'originate from within the cluster.'),
);		);
}		}

// Flag this as an intracluster request.		// Flag this as an intracluster request.
$api_request->setIsClusterRequest(true);		$api_request->setIsClusterRequest(true);
}		}

$user = $token->getObject();		$user = $token->getObject();
▲ Show 20 Lines • Show All 378 Lines • Show Last 20 Lines