File Coverage

blib/lib/Docker/Registry/Auth/Gitlab.pm

Criterion	Covered	Total	%
statement	34	35	97.1
branch	1	2	50.0
condition			n/a
subroutine	9	9	100.0
pod	2	2	100.0
total	46	48	95.8

package Docker::Registry::Auth::Gitlab;
use Moo;
use Types::Standard qw/Str/;
use namespace::autoclean;

# ABSTRACT: Authentication module for gitlab registry

with 'Docker::Registry::Auth';

use Docker::Registry::Types qw(DockerRegistryURI);
use HTTP::Tiny;
use JSON::MaybeXS qw(decode_json);

has username => (
    is       => 'ro',
    isa      => Str,
    required => 1,
);

has access_token => (
    is       => 'ro',
    isa      => Str,
    required => 1,
);

has jwt => (
    is      => 'ro',
    isa     => DockerRegistryURI,
    coerce  => 1,
    default => 'https://gitlab.com/jwt/auth',
);

sub _build_token_uri {
    my ($self, $scope) = @_;

    my $uri = $self->jwt->clone;

    $uri->query_form({
        service       => 'container_registry',
        scope         => $scope,
        client_id     => 'docker',
        offline_token => 'true',
    });

    $uri->userinfo(join(':', $self->username, $self->access_token));
    return $uri;
}

sub get_bearer_token {
    my ($self, $scope) = @_;

    my $uri = $self->_build_token_uri($scope);

    my $ua = HTTP::Tiny->new();
    my $res = $ua->get($uri);

    if ($res->{success}) {
        return decode_json($res->{content})->{token};
    }

    die "Unable to get token from gitlab!";
}

sub authorize {
    my ($self, $request, $scope) = @_;

    my $bearer_token = $self->get_bearer_token($scope);

    $request->header('Authorization', 'Bearer ' . $bearer_token);
    $request->header('Accept',
        'application/vnd.docker.distribution.manifest.v2+json');

    return $request;
}

__PACKAGE__->meta->make_immutable;

__END__