revert: tea 1.0 rewrite (#1122–#1126) (#1146)

Reverts #1126, #1125, #1124, #1123 and #1122. `go.mod` keeps the Go 1.26 line with toolchain `go1.26.9` (instead of the original `go1.26.6`) so the security fix from #1131 isn't lost. reopens #69 reopens #141 reopens #162 reopens #172 reopens #197 reopens #232 reopens #240 reopens #246 reopens #323 reopens #325 reopens #326 reopens #328 reopens #344 reopens #351 reopens #373 reopens #403 reopens #406 reopens #417 reopens #430 reopens #457 reopens #480 reopens #482 reopens #489 reopens #490 reopens #498 reopens #500 reopens #504 reopens #510 reopens #516 reopens #523 reopens #556 reopens #560 reopens #569 reopens #571 reopens #602 reopens #632 reopens #633 reopens #643 reopens #666 reopens #670 reopens #672 reopens #677 reopens #683 reopens #697 reopens #726 reopens #737 reopens #770 reopens #779 reopens #804 reopens #817 reopens #831 reopens #833 reopens #834 reopens #908 reopens #966 reopens #1023 reopens #1029 reopens #1032 reopens #1050 reopens #1052 reopens #1069 reopens #1073 reopens #1087 reopens #1091 reopens #1094 reopens #1110 reopens #1115 reopens #1116 reopens #1118 Reviewed-on: https://gitea.com/gitea/tea/pulls/1146 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
2026-10-26 19:11:25 +01:00 · 2026-10-18 20:56:33 +00:00
1 parent 33bb12729e
commit c5f674111a
@@ -0,0 +1,70 @@
+// Copyright 2020 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package git
+
+import (
+	"fmt"
+	"net/url"
+	"os"
+	"strings"
+
+	"gitea.dev/tea/modules/utils"
+	"golang.org/x/crypto/ssh"
+)
+
+type pwCallback = func(string) (string, error)
+
+// GetAuthForURL returns backend-agnostic auth settings for git network operations.
+func GetAuthForURL(remoteURL *url.URL, authToken, keyFile string, passwordCallback pwCallback) (*AuthMethod, error) {
+	switch remoteURL.Scheme {
+	case "http", "https":
+		return &AuthMethod{Scheme: remoteURL.Scheme, Username: authToken}, nil
+	case "ssh":
+		if keyFile == "" {
+			return &AuthMethod{Scheme: remoteURL.Scheme, Username: remoteURL.User.Username()}, nil
+		}
+		expandedKeyFile, err := utils.AbsPathWithExpansion(keyFile)
+		if err != nil {
+			return nil, err
+		}
+		sshKey, err := os.ReadFile(expandedKeyFile)
+		if err != nil {
+			return nil, fmt.Errorf("can not read ssh key '%s'", expandedKeyFile)
+		}
+
+		auth := &AuthMethod{
+			Scheme:   remoteURL.Scheme,
+			Username: remoteURL.User.Username(),
+			KeyFile:  expandedKeyFile,
+		}
+		if _, err := ssh.ParsePrivateKey(sshKey); err == nil {
+			return auth, nil
+		}
+
+		if _, ok := err.(*ssh.PassphraseMissingError); ok {
+			if passwordCallback == nil {
+				return nil, err
+			}
+			for i := 0; i < 3; i++ {
+				pass, err := passwordCallback(expandedKeyFile)
+				if err != nil {
+					return nil, err
+				}
+				if _, err := ssh.ParsePrivateKeyWithPassphrase(sshKey, []byte(pass)); err == nil {
+					auth.KeyPassphrase = pass
+					return auth, nil
+				}
+			}
+			return nil, err
+		}
+
+		return nil, err
+	default:
+		return nil, fmt.Errorf("don't know how to handle url scheme %v", remoteURL.Scheme)
+	}
+}
+
+func shellQuote(s string) string {
+	return "'" + strings.ReplaceAll(s, "'", "'\\''") + "'"
+}