phorge-phorge/src/applications/diffusion/controller/DiffusionRepositoryURICredentialController.php

<?php

final class DiffusionRepositoryURICredentialController
  extends DiffusionController {

  public function handleRequest(AphrontRequest $request) {
    $response = $this->loadDiffusionContextForEdit();
    if ($response) {
      return $response;
    }

    $viewer = $this->getViewer();
    $drequest = $this->getDiffusionRequest();
    $repository = $drequest->getRepository();

    $id = $request->getURIData('id');
    $uri = id(new PhabricatorRepositoryURIQuery())
      ->setViewer($viewer)
      ->withIDs(array($id))
      ->withRepositories(array($repository))
      ->requireCapabilities(
        array(
          PhabricatorPolicyCapability::CAN_VIEW,
          PhabricatorPolicyCapability::CAN_EDIT,
        ))
      ->executeOne();
    if (!$uri) {
      return new Aphront404Response();
    }

    $is_builtin = $uri->isBuiltin();
    $has_credential = (bool)$uri->getCredentialPHID();
    $view_uri = $uri->getViewURI();
    $is_remove = ($request->getURIData('action') == 'remove');

    if ($is_builtin) {
      return $this->newDialog()
        ->setTitle(pht('Builtin URIs Do Not Use Credentials'))
        ->appendParagraph(
          pht(
            'You can not set a credential for builtin URIs which Phabricator '.
            'hosts and serves. Phabricator does not fetch from these URIs or '.
            'push to these URIs, and does not need credentials to '.
            'authenticate any activity against them.'))
        ->addCancelButton($view_uri);
    }

    if ($request->isFormPost()) {
      $xactions = array();

      if ($is_remove) {
        $new_phid = null;
      } else {
        $new_phid = $request->getStr('credentialPHID');
      }

      $type_credential = PhabricatorRepositoryURITransaction::TYPE_CREDENTIAL;

      $xactions[] = id(new PhabricatorRepositoryURITransaction())
        ->setTransactionType($type_credential)
        ->setNewValue($new_phid);

      $editor = id(new DiffusionURIEditor())
        ->setActor($viewer)
        ->setContinueOnNoEffect(true)
        ->setContinueOnMissingFields(true)
        ->setContentSourceFromRequest($request)
        ->applyTransactions($uri, $xactions);

      return id(new AphrontRedirectResponse())->setURI($view_uri);
    }

    $command_engine = $uri->newCommandEngine();
    $is_supported = $command_engine->isCredentialSupported();

    $body = null;
    $form = null;
    $width = AphrontDialogView::WIDTH_DEFAULT;
    if ($is_remove) {
      if ($has_credential) {
        $title = pht('Remove Credential');
        $body = pht(
          'This credential will no longer be used to authenticate activity '.
          'against this URI.');
        $button = pht('Remove Credential');
      } else {
        $title = pht('No Credential');
        $body = pht(
          'This URI does not have an associated credential.');
        $button = null;
      }
    } else if (!$is_supported) {
      $title = pht('Unauthenticated Protocol');
      $body = pht(
        'The protocol for this URI ("%s") does not use authentication, so '.
        'you can not provide a credential.',
        $command_engine->getDisplayProtocol());
      $button = null;
    } else {
      $effective_uri = $uri->getEffectiveURI();

      $label = $command_engine->getPassphraseCredentialLabel();
      $credential_type = $command_engine->getPassphraseDefaultCredentialType();

      $provides_type = $command_engine->getPassphraseProvidesCredentialType();
      $options = id(new PassphraseCredentialQuery())
        ->setViewer($viewer)
        ->withIsDestroyed(false)
        ->withProvidesTypes(array($provides_type))
        ->execute();

      $control = id(new PassphraseCredentialControl())
        ->setName('credentialPHID')
        ->setLabel($label)
        ->setValue($uri->getCredentialPHID())
        ->setCredentialType($credential_type)
        ->setOptions($options);

      $default_user = $effective_uri->getUser();
      if (strlen($default_user)) {
        $control->setDefaultUsername($default_user);
      }

      $form = id(new AphrontFormView())
        ->setViewer($viewer)
        ->appendControl($control);

      if ($has_credential) {
        $title = pht('Update Credential');
        $button = pht('Update Credential');
      } else {
        $title = pht('Set Credential');
        $button = pht('Set Credential');
      }

      $width = AphrontDialogView::WIDTH_FORM;
    }

    $dialog = $this->newDialog()
      ->setWidth($width)
      ->setTitle($title)
      ->addCancelButton($view_uri);

    if ($body) {
      $dialog->appendParagraph($body);
    }

    if ($form) {
      $dialog->appendForm($form);
    }

    if ($button) {
      $dialog->addSubmitButton($button);
    }

    return $dialog;
  }

}