mirror of
https://github.com/scm-manager/scm-manager.git
synced 2026-02-26 16:30:50 +01:00
Using a default user with a default password has the implicit risk, that this user is not changed and therefore this system can be compromised. With this change, SCM-Manager does not create the default user with the default password on startup any more, but it shows an initial form where the initial values for the administration user have to be entered by the user. To secure this form, a random token is created on startup and printed in the log. To implement this form, the concept of an InitializationStep is introduced. This extension point can be implemented to offer different setup tasks. The creation of the administration user is the first implementation, others might be things like first plugin selections or the like. Frontend components are selected by the name of these initialization steps, whose names will be added to the index resource (whichever is active at the moment) and will be show accordingly. Co-authored-by: Eduard Heimbuch <eduard.heimbuch@cloudogu.com>
322 lines
13 KiB
Java
322 lines
13 KiB
Java
/*
|
|
* MIT License
|
|
*
|
|
* Copyright (c) 2020-present Cloudogu GmbH and Contributors
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in all
|
|
* copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
* SOFTWARE.
|
|
*/
|
|
|
|
package sonia.scm.lifecycle.modules;
|
|
|
|
import com.fasterxml.jackson.databind.ObjectMapper;
|
|
import com.google.inject.Provider;
|
|
import com.google.inject.multibindings.Multibinder;
|
|
import com.google.inject.servlet.RequestScoped;
|
|
import com.google.inject.servlet.ServletModule;
|
|
import com.google.inject.throwingproviders.ThrowingProviderBinder;
|
|
import io.micrometer.core.instrument.MeterRegistry;
|
|
import org.slf4j.Logger;
|
|
import org.slf4j.LoggerFactory;
|
|
import sonia.scm.Default;
|
|
import sonia.scm.DefaultRootURL;
|
|
import sonia.scm.PushStateDispatcher;
|
|
import sonia.scm.PushStateDispatcherProvider;
|
|
import sonia.scm.RootURL;
|
|
import sonia.scm.Undecorated;
|
|
import sonia.scm.api.rest.ObjectMapperProvider;
|
|
import sonia.scm.api.v2.resources.BranchLinkProvider;
|
|
import sonia.scm.api.v2.resources.DefaultBranchLinkProvider;
|
|
import sonia.scm.api.v2.resources.DefaultRepositoryLinkProvider;
|
|
import sonia.scm.api.v2.resources.RepositoryLinkProvider;
|
|
import sonia.scm.cache.CacheManager;
|
|
import sonia.scm.cache.GuavaCacheManager;
|
|
import sonia.scm.config.ScmConfiguration;
|
|
import sonia.scm.event.ScmEventBus;
|
|
import sonia.scm.group.DefaultGroupCollector;
|
|
import sonia.scm.group.DefaultGroupDisplayManager;
|
|
import sonia.scm.group.DefaultGroupManager;
|
|
import sonia.scm.group.GroupCollector;
|
|
import sonia.scm.group.GroupDAO;
|
|
import sonia.scm.group.GroupDisplayManager;
|
|
import sonia.scm.group.GroupManager;
|
|
import sonia.scm.group.GroupManagerProvider;
|
|
import sonia.scm.group.xml.XmlGroupDAO;
|
|
import sonia.scm.initialization.DefaultInitializationFinisher;
|
|
import sonia.scm.initialization.InitializationFinisher;
|
|
import sonia.scm.metrics.MeterRegistryProvider;
|
|
import sonia.scm.migration.MigrationDAO;
|
|
import sonia.scm.net.SSLContextProvider;
|
|
import sonia.scm.net.TrustManagerProvider;
|
|
import sonia.scm.net.ahc.AdvancedHttpClient;
|
|
import sonia.scm.net.ahc.ContentTransformer;
|
|
import sonia.scm.net.ahc.DefaultAdvancedHttpClient;
|
|
import sonia.scm.net.ahc.JsonContentTransformer;
|
|
import sonia.scm.net.ahc.XmlContentTransformer;
|
|
import sonia.scm.notifications.DefaultNotificationSender;
|
|
import sonia.scm.notifications.NotificationSender;
|
|
import sonia.scm.plugin.DefaultPluginManager;
|
|
import sonia.scm.plugin.PluginLoader;
|
|
import sonia.scm.plugin.PluginManager;
|
|
import sonia.scm.repository.DefaultHealthCheckService;
|
|
import sonia.scm.repository.DefaultNamespaceManager;
|
|
import sonia.scm.repository.DefaultRepositoryManager;
|
|
import sonia.scm.repository.DefaultRepositoryProvider;
|
|
import sonia.scm.repository.DefaultRepositoryRoleManager;
|
|
import sonia.scm.repository.HealthCheckContextListener;
|
|
import sonia.scm.repository.HealthCheckService;
|
|
import sonia.scm.repository.NamespaceManager;
|
|
import sonia.scm.repository.NamespaceStrategy;
|
|
import sonia.scm.repository.NamespaceStrategyProvider;
|
|
import sonia.scm.repository.PermissionProvider;
|
|
import sonia.scm.repository.Repository;
|
|
import sonia.scm.repository.RepositoryDAO;
|
|
import sonia.scm.repository.RepositoryManager;
|
|
import sonia.scm.repository.RepositoryManagerProvider;
|
|
import sonia.scm.repository.RepositoryProvider;
|
|
import sonia.scm.repository.RepositoryRoleDAO;
|
|
import sonia.scm.repository.RepositoryRoleManager;
|
|
import sonia.scm.repository.api.HookContextFactory;
|
|
import sonia.scm.repository.api.RepositoryServiceFactory;
|
|
import sonia.scm.repository.spi.HookEventFacade;
|
|
import sonia.scm.repository.xml.XmlRepositoryDAO;
|
|
import sonia.scm.repository.xml.XmlRepositoryRoleDAO;
|
|
import sonia.scm.schedule.CronScheduler;
|
|
import sonia.scm.schedule.Scheduler;
|
|
import sonia.scm.security.AccessTokenCookieIssuer;
|
|
import sonia.scm.security.AuthorizationChangedEventProducer;
|
|
import sonia.scm.security.ConfigurableLoginAttemptHandler;
|
|
import sonia.scm.security.DefaultAccessTokenCookieIssuer;
|
|
import sonia.scm.security.DefaultSecuritySystem;
|
|
import sonia.scm.security.LoginAttemptHandler;
|
|
import sonia.scm.security.RepositoryPermissionProvider;
|
|
import sonia.scm.security.SecuritySystem;
|
|
import sonia.scm.store.FileStoreExporter;
|
|
import sonia.scm.store.StoreExporter;
|
|
import sonia.scm.template.MustacheTemplateEngine;
|
|
import sonia.scm.template.TemplateEngine;
|
|
import sonia.scm.template.TemplateEngineFactory;
|
|
import sonia.scm.template.TemplateServlet;
|
|
import sonia.scm.update.repository.DefaultMigrationStrategyDAO;
|
|
import sonia.scm.user.DefaultUserDisplayManager;
|
|
import sonia.scm.user.DefaultUserManager;
|
|
import sonia.scm.user.UserDAO;
|
|
import sonia.scm.user.UserDisplayManager;
|
|
import sonia.scm.user.UserManager;
|
|
import sonia.scm.user.UserManagerProvider;
|
|
import sonia.scm.user.xml.XmlUserDAO;
|
|
import sonia.scm.util.DebugServlet;
|
|
import sonia.scm.util.ScmConfigurationUtil;
|
|
import sonia.scm.web.UserAgentParser;
|
|
import sonia.scm.web.cgi.CGIExecutorFactory;
|
|
import sonia.scm.web.cgi.DefaultCGIExecutorFactory;
|
|
import sonia.scm.web.filter.LoggingFilter;
|
|
import sonia.scm.web.security.AdministrationContext;
|
|
import sonia.scm.web.security.DefaultAdministrationContext;
|
|
|
|
import javax.net.ssl.SSLContext;
|
|
import javax.net.ssl.TrustManager;
|
|
|
|
/**
|
|
* @author Sebastian Sdorra
|
|
*/
|
|
class ScmServletModule extends ServletModule {
|
|
|
|
private static final String PATTERN_ALL = "/*";
|
|
private static final String PATTERN_DEBUG = "/debug.html";
|
|
private static final String PATTERN_INDEX = "/index.html";
|
|
private static final String SYSTEM_PROPERTY_DEBUG_HTTP = "scm.debug.http";
|
|
|
|
private static final Logger logger = LoggerFactory.getLogger(ScmServletModule.class);
|
|
|
|
private final ClassOverrides overrides;
|
|
private final PluginLoader pluginLoader;
|
|
|
|
ScmServletModule(PluginLoader pluginLoader, ClassOverrides overrides) {
|
|
this.pluginLoader = pluginLoader;
|
|
this.overrides = overrides;
|
|
}
|
|
|
|
@Override
|
|
protected void configureServlets() {
|
|
install(ThrowingProviderBinder.forModule(this));
|
|
|
|
ScmConfiguration config = getScmConfiguration();
|
|
|
|
bind(NamespaceStrategy.class).toProvider(NamespaceStrategyProvider.class);
|
|
|
|
// bind repository provider
|
|
ThrowingProviderBinder.create(binder())
|
|
.bind(RepositoryProvider.class, Repository.class)
|
|
.to(DefaultRepositoryProvider.class)
|
|
.in(RequestScoped.class);
|
|
|
|
// bind event api
|
|
bind(ScmEventBus.class).toInstance(ScmEventBus.getInstance());
|
|
|
|
// bind core
|
|
bind(ScmConfiguration.class).toInstance(config);
|
|
bind(PluginManager.class, DefaultPluginManager.class);
|
|
|
|
// bind scheduler
|
|
bind(Scheduler.class).to(CronScheduler.class);
|
|
|
|
// bind health check stuff
|
|
bind(HealthCheckContextListener.class);
|
|
|
|
// bind extensions
|
|
pluginLoader.getExtensionProcessor().processAutoBindExtensions(binder());
|
|
|
|
// bind metrics
|
|
bind(MeterRegistry.class).toProvider(MeterRegistryProvider.class).asEagerSingleton();
|
|
|
|
// bind security stuff
|
|
bind(LoginAttemptHandler.class).to(ConfigurableLoginAttemptHandler.class);
|
|
bind(AuthorizationChangedEventProducer.class);
|
|
|
|
bind(SecuritySystem.class).to(DefaultSecuritySystem.class);
|
|
bind(AdministrationContext.class, DefaultAdministrationContext.class);
|
|
|
|
// bind cache
|
|
bind(CacheManager.class, GuavaCacheManager.class);
|
|
bind(org.apache.shiro.cache.CacheManager.class, GuavaCacheManager.class);
|
|
|
|
// bind dao
|
|
bind(GroupDAO.class, XmlGroupDAO.class);
|
|
bind(UserDAO.class, XmlUserDAO.class);
|
|
bind(RepositoryDAO.class, XmlRepositoryDAO.class);
|
|
bind(RepositoryRoleDAO.class, XmlRepositoryRoleDAO.class);
|
|
bind(RepositoryRoleManager.class).to(DefaultRepositoryRoleManager.class);
|
|
bind(MigrationDAO.class).to(DefaultMigrationStrategyDAO.class);
|
|
|
|
bindDecorated(RepositoryManager.class, DefaultRepositoryManager.class,
|
|
RepositoryManagerProvider.class);
|
|
bindDecorated(UserManager.class, DefaultUserManager.class,
|
|
UserManagerProvider.class);
|
|
bind(UserDisplayManager.class, DefaultUserDisplayManager.class);
|
|
bindDecorated(GroupManager.class, DefaultGroupManager.class,
|
|
GroupManagerProvider.class);
|
|
bind(GroupDisplayManager.class, DefaultGroupDisplayManager.class);
|
|
bind(NamespaceManager.class, DefaultNamespaceManager.class);
|
|
bind(GroupCollector.class, DefaultGroupCollector.class);
|
|
bind(CGIExecutorFactory.class, DefaultCGIExecutorFactory.class);
|
|
bind(StoreExporter.class, FileStoreExporter.class);
|
|
|
|
// bind ssl context provider
|
|
bind(SSLContext.class).toProvider(SSLContextProvider.class);
|
|
|
|
// bind trust manager provider
|
|
bind(TrustManager.class).toProvider(TrustManagerProvider.class);
|
|
|
|
// bind ahc
|
|
Multibinder<ContentTransformer> transformers =
|
|
Multibinder.newSetBinder(binder(), ContentTransformer.class);
|
|
transformers.addBinding().to(XmlContentTransformer.class);
|
|
transformers.addBinding().to(JsonContentTransformer.class);
|
|
bind(AdvancedHttpClient.class).to(DefaultAdvancedHttpClient.class);
|
|
|
|
// bind repository service factory
|
|
bind(RepositoryServiceFactory.class);
|
|
|
|
// bind new hook api
|
|
bind(HookContextFactory.class);
|
|
bind(HookEventFacade.class);
|
|
|
|
// bind user-agent parser
|
|
bind(UserAgentParser.class);
|
|
|
|
// bind debug logging filter
|
|
if ("true".equalsIgnoreCase(System.getProperty(SYSTEM_PROPERTY_DEBUG_HTTP))) {
|
|
filter(PATTERN_ALL).through(LoggingFilter.class);
|
|
}
|
|
|
|
// debug servlet
|
|
serve(PATTERN_DEBUG).with(DebugServlet.class);
|
|
|
|
// template
|
|
serve(PATTERN_INDEX, "/").with(TemplateServlet.class);
|
|
|
|
Multibinder<TemplateEngine> engineBinder =
|
|
Multibinder.newSetBinder(binder(), TemplateEngine.class);
|
|
|
|
engineBinder.addBinding().to(MustacheTemplateEngine.class);
|
|
bind(TemplateEngine.class).annotatedWith(Default.class).to(
|
|
MustacheTemplateEngine.class);
|
|
bind(TemplateEngineFactory.class);
|
|
bind(ObjectMapper.class).toProvider(ObjectMapperProvider.class);
|
|
|
|
// bind events
|
|
|
|
bind(AccessTokenCookieIssuer.class).to(DefaultAccessTokenCookieIssuer.class);
|
|
bind(PushStateDispatcher.class).toProvider(PushStateDispatcherProvider.class);
|
|
|
|
// bind api link provider
|
|
bind(BranchLinkProvider.class).to(DefaultBranchLinkProvider.class);
|
|
bind(RepositoryLinkProvider.class).to(DefaultRepositoryLinkProvider.class);
|
|
|
|
// bind url helper
|
|
bind(RootURL.class).to(DefaultRootURL.class);
|
|
|
|
bind(PermissionProvider.class).to(RepositoryPermissionProvider.class);
|
|
|
|
bind(HealthCheckService.class).to(DefaultHealthCheckService.class);
|
|
|
|
bind(NotificationSender.class).to(DefaultNotificationSender.class);
|
|
|
|
bind(InitializationFinisher.class).to(DefaultInitializationFinisher.class);
|
|
}
|
|
|
|
private <T> void bind(Class<T> clazz, Class<? extends T> defaultImplementation) {
|
|
Class<? extends T> implementation = find(clazz, defaultImplementation);
|
|
logger.debug("bind {} to {}", clazz, implementation);
|
|
bind(clazz).to(implementation);
|
|
}
|
|
|
|
private <T> void bindDecorated(
|
|
Class<T> clazz, Class<? extends T> defaultImplementation, Class<? extends Provider<T>> providerClass
|
|
) {
|
|
Class<? extends T> implementation = find(clazz, defaultImplementation);
|
|
|
|
logger.debug("bind undecorated {} to {}", clazz, implementation);
|
|
bind(clazz).annotatedWith(Undecorated.class).to(implementation);
|
|
|
|
logger.debug("bind {} to provider {}", clazz, providerClass);
|
|
bind(clazz).toProvider(providerClass);
|
|
}
|
|
|
|
private <T> Class<? extends T> find(Class<T> clazz, Class<? extends T> defaultImplementation) {
|
|
Class<? extends T> implementation = overrides.getOverride(clazz);
|
|
|
|
if (implementation != null) {
|
|
logger.info("found override {} for {}", implementation, clazz);
|
|
} else {
|
|
implementation = defaultImplementation;
|
|
logger.trace("no override available for {}, using default implementation {}", clazz, implementation);
|
|
}
|
|
|
|
return implementation;
|
|
}
|
|
|
|
private ScmConfiguration getScmConfiguration() {
|
|
ScmConfiguration configuration = new ScmConfiguration();
|
|
ScmConfigurationUtil.getInstance().load(configuration);
|
|
return configuration;
|
|
}
|
|
|
|
}
|