[thirdparty/git.git] / credential.c

#include "cache.h"
#include "config.h"
#include "credential.h"
#include "string-list.h"
#include "run-command.h"
#include "url.h"
#include "prompt.h"
#include "sigchain.h"
#include "urlmatch.h"

void credential_init(struct credential *c)
{
	memset(c, 0, sizeof(*c));
	c->helpers.strdup_strings = 1;
}

void credential_clear(struct credential *c)
{
	free(c->protocol);
	free(c->host);
	free(c->path);
	free(c->username);
	free(c->password);
	string_list_clear(&c->helpers, 0);

	credential_init(c);
}

int credential_match(const struct credential *want,
		     const struct credential *have)
{
#define CHECK(x) (!want->x || (have->x && !strcmp(want->x, have->x)))
	return CHECK(protocol) &&
	       CHECK(host) &&
	       CHECK(path) &&
	       CHECK(username);
#undef CHECK
}

static int credential_config_callback(const char *var, const char *value,
				      void *data)
{
	struct credential *c = data;
	const char *key;

	if (!skip_prefix(var, "credential.", &key))
		return 0;

	if (!value)
		return config_error_nonbool(var);

	if (!strcmp(key, "helper")) {
		if (*value)
			string_list_append(&c->helpers, value);
		else
			string_list_clear(&c->helpers, 0);
	} else if (!strcmp(key, "username")) {
		if (!c->username_from_proto) {
			free(c->username);
			c->username = xstrdup(value);
		}
	}
	else if (!strcmp(key, "usehttppath"))
		c->use_http_path = git_config_bool(var, value);

	return 0;
}

static int proto_is_http(const char *s)
{
	if (!s)
		return 0;
	return !strcmp(s, "https") || !strcmp(s, "http");
}

static void credential_describe(struct credential *c, struct strbuf *out);
static void credential_format(struct credential *c, struct strbuf *out);

static int select_all(const struct urlmatch_item *a,
		      const struct urlmatch_item *b)
{
	return 0;
}

static void credential_apply_config(struct credential *c)
{
	char *normalized_url;
	struct urlmatch_config config = { STRING_LIST_INIT_DUP };
	struct strbuf url = STRBUF_INIT;

	if (!c->host)
		die(_("refusing to work with credential missing host field"));
	if (!c->protocol)
		die(_("refusing to work with credential missing protocol field"));

	if (c->configured)
		return;

	config.section = "credential";
	config.key = NULL;
	config.collect_fn = credential_config_callback;
	config.cascade_fn = NULL;
	config.select_fn = select_all;
	config.cb = c;

	credential_format(c, &url);
	normalized_url = url_normalize(url.buf, &config.url);

	git_config(urlmatch_config_entry, &config);
	free(normalized_url);
	strbuf_release(&url);

	c->configured = 1;

	if (!c->use_http_path && proto_is_http(c->protocol)) {
		FREE_AND_NULL(c->path);
	}
}

static void credential_describe(struct credential *c, struct strbuf *out)
{
	if (!c->protocol)
		return;
	strbuf_addf(out, "%s://", c->protocol);
	if (c->username && *c->username)
		strbuf_addf(out, "%s@", c->username);
	if (c->host)
		strbuf_addstr(out, c->host);
	if (c->path)
		strbuf_addf(out, "/%s", c->path);
}

static void credential_format(struct credential *c, struct strbuf *out)
{
	if (!c->protocol)
		return;
	strbuf_addf(out, "%s://", c->protocol);
	if (c->username && *c->username) {
		strbuf_add_percentencode(out, c->username);
		strbuf_addch(out, '@');
	}
	if (c->host)
		strbuf_addstr(out, c->host);
	if (c->path) {
		strbuf_addch(out, '/');
		strbuf_add_percentencode(out, c->path);
	}
}

static char *credential_ask_one(const char *what, struct credential *c,
				int flags)
{
	struct strbuf desc = STRBUF_INIT;
	struct strbuf prompt = STRBUF_INIT;
	char *r;

	credential_describe(c, &desc);
	if (desc.len)
		strbuf_addf(&prompt, "%s for '%s': ", what, desc.buf);
	else
		strbuf_addf(&prompt, "%s: ", what);

	r = git_prompt(prompt.buf, flags);

	strbuf_release(&desc);
	strbuf_release(&prompt);
	return xstrdup(r);
}

static void credential_getpass(struct credential *c)
{
	if (!c->username)
		c->username = credential_ask_one("Username", c,
						 PROMPT_ASKPASS|PROMPT_ECHO);
	if (!c->password)
		c->password = credential_ask_one("Password", c,
						 PROMPT_ASKPASS);
}

int credential_read(struct credential *c, FILE *fp)
{
	struct strbuf line = STRBUF_INIT;

	while (strbuf_getline_lf(&line, fp) != EOF) {
		char *key = line.buf;
		char *value = strchr(key, '=');

		if (!line.len)
			break;

		if (!value) {
			warning("invalid credential line: %s", key);
			strbuf_release(&line);
			return -1;
		}
		*value++ = '\0';

		if (!strcmp(key, "username")) {
			free(c->username);
			c->username = xstrdup(value);
			c->username_from_proto = 1;
		} else if (!strcmp(key, "password")) {
			free(c->password);
			c->password = xstrdup(value);
		} else if (!strcmp(key, "protocol")) {
			free(c->protocol);
			c->protocol = xstrdup(value);
		} else if (!strcmp(key, "host")) {
			free(c->host);
			c->host = xstrdup(value);
		} else if (!strcmp(key, "path")) {
			free(c->path);
			c->path = xstrdup(value);
		} else if (!strcmp(key, "url")) {
			credential_from_url(c, value);
		} else if (!strcmp(key, "quit")) {
			c->quit = !!git_config_bool("quit", value);
		}
		/*
		 * Ignore other lines; we don't know what they mean, but
		 * this future-proofs us when later versions of git do
		 * learn new lines, and the helpers are updated to match.
		 */
	}

	strbuf_release(&line);
	return 0;
}

static void credential_write_item(FILE *fp, const char *key, const char *value,
				  int required)
{
	if (!value && required)
		BUG("credential value for %s is missing", key);
	if (!value)
		return;
	if (strchr(value, '\n'))
		die("credential value for %s contains newline", key);
	fprintf(fp, "%s=%s\n", key, value);
}

void credential_write(const struct credential *c, FILE *fp)
{
	credential_write_item(fp, "protocol", c->protocol, 1);
	credential_write_item(fp, "host", c->host, 1);
	credential_write_item(fp, "path", c->path, 0);
	credential_write_item(fp, "username", c->username, 0);
	credential_write_item(fp, "password", c->password, 0);
}

static int run_credential_helper(struct credential *c,
				 const char *cmd,
				 int want_output)
{
	struct child_process helper = CHILD_PROCESS_INIT;
	const char *argv[] = { NULL, NULL };
	FILE *fp;

	argv[0] = cmd;
	helper.argv = argv;
	helper.use_shell = 1;
	helper.in = -1;
	if (want_output)
		helper.out = -1;
	else
		helper.no_stdout = 1;

	if (start_command(&helper) < 0)
		return -1;

	fp = xfdopen(helper.in, "w");
	sigchain_push(SIGPIPE, SIG_IGN);
	credential_write(c, fp);
	fclose(fp);
	sigchain_pop(SIGPIPE);

	if (want_output) {
		int r;
		fp = xfdopen(helper.out, "r");
		r = credential_read(c, fp);
		fclose(fp);
		if (r < 0) {
			finish_command(&helper);
			return -1;
		}
	}

	if (finish_command(&helper))
		return -1;
	return 0;
}

static int credential_do(struct credential *c, const char *helper,
			 const char *operation)
{
	struct strbuf cmd = STRBUF_INIT;
	int r;

	if (helper[0] == '!')
		strbuf_addstr(&cmd, helper + 1);
	else if (is_absolute_path(helper))
		strbuf_addstr(&cmd, helper);
	else
		strbuf_addf(&cmd, "git credential-%s", helper);

	strbuf_addf(&cmd, " %s", operation);
	r = run_credential_helper(c, cmd.buf, !strcmp(operation, "get"));

	strbuf_release(&cmd);
	return r;
}

void credential_fill(struct credential *c)
{
	int i;

	if (c->username && c->password)
		return;

	credential_apply_config(c);

	for (i = 0; i < c->helpers.nr; i++) {
		credential_do(c, c->helpers.items[i].string, "get");
		if (c->username && c->password)
			return;
		if (c->quit)
			die("credential helper '%s' told us to quit",
			    c->helpers.items[i].string);
	}

	credential_getpass(c);
	if (!c->username && !c->password)
		die("unable to get password from user");
}

void credential_approve(struct credential *c)
{
	int i;

	if (c->approved)
		return;
	if (!c->username || !c->password)
		return;

	credential_apply_config(c);

	for (i = 0; i < c->helpers.nr; i++)
		credential_do(c, c->helpers.items[i].string, "store");
	c->approved = 1;
}

void credential_reject(struct credential *c)
{
	int i;

	credential_apply_config(c);

	for (i = 0; i < c->helpers.nr; i++)
		credential_do(c, c->helpers.items[i].string, "erase");

	FREE_AND_NULL(c->username);
	FREE_AND_NULL(c->password);
	c->approved = 0;
}

static int check_url_component(const char *url, int quiet,
			       const char *name, const char *value)
{
	if (!value)
		return 0;
	if (!strchr(value, '\n'))
		return 0;

	if (!quiet)
		warning(_("url contains a newline in its %s component: %s"),
			name, url);
	return -1;
}

int credential_from_url_gently(struct credential *c, const char *url,
			       int quiet)
{
	const char *at, *colon, *cp, *slash, *host, *proto_end;

	credential_clear(c);

	/*
	 * Match one of:
	 *   (1) proto://<host>/...
	 *   (2) proto://<user>@<host>/...
	 *   (3) proto://<user>:<pass>@<host>/...
	 */
	proto_end = strstr(url, "://");
	if (!proto_end || proto_end == url) {
		if (!quiet)
			warning(_("url has no scheme: %s"), url);
		return -1;
	}
	cp = proto_end + 3;
	at = strchr(cp, '@');
	colon = strchr(cp, ':');
	slash = strchrnul(cp, '/');

	if (!at || slash <= at) {
		/* Case (1) */
		host = cp;
	}
	else if (!colon || at <= colon) {
		/* Case (2) */
		c->username = url_decode_mem(cp, at - cp);
		if (c->username && *c->username)
			c->username_from_proto = 1;
		host = at + 1;
	} else {
		/* Case (3) */
		c->username = url_decode_mem(cp, colon - cp);
		if (c->username && *c->username)
			c->username_from_proto = 1;
		c->password = url_decode_mem(colon + 1, at - (colon + 1));
		host = at + 1;
	}

	c->protocol = xmemdupz(url, proto_end - url);
	c->host = url_decode_mem(host, slash - host);
	/* Trim leading and trailing slashes from path */
	while (*slash == '/')
		slash++;
	if (*slash) {
		char *p;
		c->path = url_decode(slash);
		p = c->path + strlen(c->path) - 1;
		while (p > c->path && *p == '/')
			*p-- = '\0';
	}

	if (check_url_component(url, quiet, "username", c->username) < 0 ||
	    check_url_component(url, quiet, "password", c->password) < 0 ||
	    check_url_component(url, quiet, "protocol", c->protocol) < 0 ||
	    check_url_component(url, quiet, "host", c->host) < 0 ||
	    check_url_component(url, quiet, "path", c->path) < 0)
		return -1;

	return 0;
}

void credential_from_url(struct credential *c, const char *url)
{
	if (credential_from_url_gently(c, url, 0) < 0)
		die(_("credential url cannot be parsed: %s"), url);
}
Commit	Line	Data
abca927d	1	#include "cache.h"
b2141fc1	2	#include "config.h"
abca927d JK	3	#include "credential.h"
	4	#include "string-list.h"
	5	#include "run-command.h"
d3e847c1	6	#include "url.h"
d3c58b83	7	#include "prompt.h"
a0d51e8d	8	#include "sigchain.h"
46fd7b39	9	#include "urlmatch.h"
abca927d JK	10
	11	void credential_init(struct credential *c)
	12	{
	13	memset(c, 0, sizeof(*c));
	14	c->helpers.strdup_strings = 1;
	15	}
	16
	17	void credential_clear(struct credential *c)
	18	{
	19	free(c->protocol);
	20	free(c->host);
	21	free(c->path);
	22	free(c->username);
	23	free(c->password);
	24	string_list_clear(&c->helpers, 0);
	25
	26	credential_init(c);
	27	}
	28
11825072 JK	29	int credential_match(const struct credential *want,
	30	const struct credential *have)
	31	{
	32	#define CHECK(x) (!want->x \|\| (have->x && !strcmp(want->x, have->x)))
	33	return CHECK(protocol) &&
	34	CHECK(host) &&
	35	CHECK(path) &&
	36	CHECK(username);
	37	#undef CHECK
	38	}
	39
	40	static int credential_config_callback(const char var, const char value,
	41	void *data)
	42	{
	43	struct credential *c = data;
46fd7b39	44	const char *key;
11825072	45
cf4fff57	46	if (!skip_prefix(var, "credential.", &key))
11825072 JK	47	return 0;
	48
	49	if (!value)
	50	return config_error_nonbool(var);
	51
24321375 JK	52	if (!strcmp(key, "helper")) {
	53	if (*value)
	54	string_list_append(&c->helpers, value);
	55	else
	56	string_list_clear(&c->helpers, 0);
	57	} else if (!strcmp(key, "username")) {
82eb2498	58	if (!c->username_from_proto) {
82eb2498	59	free(c->username);
d5742425	60	c->username = xstrdup(value);
82eb2498	61	}
d5742425	62	}
a78fbb4f JK	63	else if (!strcmp(key, "usehttppath"))
a78fbb4f JK	64	c->use_http_path = git_config_bool(var, value);
11825072 JK	65
	66	return 0;
	67	}
	68
a78fbb4f JK	69	static int proto_is_http(const char *s)
	70	{
	71	if (!s)
	72	return 0;
	73	return !strcmp(s, "https") \|\| !strcmp(s, "http");
	74	}
	75
46fd7b39	76	static void credential_describe(struct credential c, struct strbuf out);
	77	static void credential_format(struct credential c, struct strbuf out);
	78
	79	static int select_all(const struct urlmatch_item *a,
	80	const struct urlmatch_item *b)
	81	{
	82	return 0;
	83	}
	84
11825072 JK	85	static void credential_apply_config(struct credential *c)
11825072 JK	86	{
46fd7b39	87	char *normalized_url;
	88	struct urlmatch_config config = { STRING_LIST_INIT_DUP };
	89	struct strbuf url = STRBUF_INIT;
	90
8ba8ed56 JK	91	if (!c->host)
	92	die(_("refusing to work with credential missing host field"));
	93	if (!c->protocol)
	94	die(_("refusing to work with credential missing protocol field"));
	95
11825072 JK	96	if (c->configured)
11825072 JK	97	return;
46fd7b39	98
	99	config.section = "credential";
	100	config.key = NULL;
	101	config.collect_fn = credential_config_callback;
	102	config.cascade_fn = NULL;
	103	config.select_fn = select_all;
	104	config.cb = c;
	105
	106	credential_format(c, &url);
	107	normalized_url = url_normalize(url.buf, &config.url);
	108
	109	git_config(urlmatch_config_entry, &config);
	110	free(normalized_url);
	111	strbuf_release(&url);
	112
11825072	113	c->configured = 1;
a78fbb4f JK	114
a78fbb4f JK	115	if (!c->use_http_path && proto_is_http(c->protocol)) {
6a83d902	116	FREE_AND_NULL(c->path);
a78fbb4f	117	}
11825072 JK	118	}
11825072 JK	119
abca927d JK	120	static void credential_describe(struct credential c, struct strbuf out)
	121	{
	122	if (!c->protocol)
	123	return;
	124	strbuf_addf(out, "%s://", c->protocol);
	125	if (c->username && *c->username)
	126	strbuf_addf(out, "%s@", c->username);
	127	if (c->host)
	128	strbuf_addstr(out, c->host);
	129	if (c->path)
	130	strbuf_addf(out, "/%s", c->path);
	131	}
	132
46fd7b39	133	static void credential_format(struct credential c, struct strbuf out)
	134	{
	135	if (!c->protocol)
	136	return;
	137	strbuf_addf(out, "%s://", c->protocol);
	138	if (c->username && *c->username) {
	139	strbuf_add_percentencode(out, c->username);
	140	strbuf_addch(out, '@');
	141	}
	142	if (c->host)
	143	strbuf_addstr(out, c->host);
	144	if (c->path) {
	145	strbuf_addch(out, '/');
	146	strbuf_add_percentencode(out, c->path);
	147	}
	148	}
	149
ce77aa48 JK	150	static char credential_ask_one(const char what, struct credential *c,
ce77aa48 JK	151	int flags)
abca927d JK	152	{
	153	struct strbuf desc = STRBUF_INIT;
	154	struct strbuf prompt = STRBUF_INIT;
	155	char *r;
	156
	157	credential_describe(c, &desc);
	158	if (desc.len)
	159	strbuf_addf(&prompt, "%s for '%s': ", what, desc.buf);
	160	else
	161	strbuf_addf(&prompt, "%s: ", what);
	162
ce77aa48	163	r = git_prompt(prompt.buf, flags);
abca927d JK	164
	165	strbuf_release(&desc);
	166	strbuf_release(&prompt);
	167	return xstrdup(r);
	168	}
	169
	170	static void credential_getpass(struct credential *c)
	171	{
	172	if (!c->username)
ce77aa48 JK	173	c->username = credential_ask_one("Username", c,
ce77aa48 JK	174	PROMPT_ASKPASS\|PROMPT_ECHO);
abca927d	175	if (!c->password)
ce77aa48 JK	176	c->password = credential_ask_one("Password", c,
ce77aa48 JK	177	PROMPT_ASKPASS);
abca927d JK	178	}
	179
	180	int credential_read(struct credential c, FILE fp)
	181	{
	182	struct strbuf line = STRBUF_INIT;
	183
8f309aeb	184	while (strbuf_getline_lf(&line, fp) != EOF) {
abca927d JK	185	char *key = line.buf;
	186	char *value = strchr(key, '=');
	187
	188	if (!line.len)
	189	break;
	190
	191	if (!value) {
	192	warning("invalid credential line: %s", key);
	193	strbuf_release(&line);
	194	return -1;
	195	}
	196	*value++ = '\0';
	197
	198	if (!strcmp(key, "username")) {
	199	free(c->username);
	200	c->username = xstrdup(value);
82eb2498	201	c->username_from_proto = 1;
abca927d JK	202	} else if (!strcmp(key, "password")) {
	203	free(c->password);
	204	c->password = xstrdup(value);
	205	} else if (!strcmp(key, "protocol")) {
	206	free(c->protocol);
	207	c->protocol = xstrdup(value);
	208	} else if (!strcmp(key, "host")) {
	209	free(c->host);
	210	c->host = xstrdup(value);
	211	} else if (!strcmp(key, "path")) {
	212	free(c->path);
	213	c->path = xstrdup(value);
9c183a70 JK	214	} else if (!strcmp(key, "url")) {
9c183a70 JK	215	credential_from_url(c, value);
59b38652 JK	216	} else if (!strcmp(key, "quit")) {
59b38652 JK	217	c->quit = !!git_config_bool("quit", value);
abca927d JK	218	}
	219	/*
	220	* Ignore other lines; we don't know what they mean, but
	221	* this future-proofs us when later versions of git do
	222	* learn new lines, and the helpers are updated to match.
	223	*/
	224	}
	225
	226	strbuf_release(&line);
	227	return 0;
	228	}
	229
8ba8ed56 JK	230	static void credential_write_item(FILE fp, const char key, const char *value,
8ba8ed56 JK	231	int required)
abca927d	232	{
8ba8ed56 JK	233	if (!value && required)
8ba8ed56 JK	234	BUG("credential value for %s is missing", key);
abca927d JK	235	if (!value)
abca927d JK	236	return;
9a6bbee8 JK	237	if (strchr(value, '\n'))
9a6bbee8 JK	238	die("credential value for %s contains newline", key);
abca927d JK	239	fprintf(fp, "%s=%s\n", key, value);
	240	}
	241
2d6dc182	242	void credential_write(const struct credential c, FILE fp)
abca927d	243	{
8ba8ed56 JK	244	credential_write_item(fp, "protocol", c->protocol, 1);
	245	credential_write_item(fp, "host", c->host, 1);
	246	credential_write_item(fp, "path", c->path, 0);
	247	credential_write_item(fp, "username", c->username, 0);
	248	credential_write_item(fp, "password", c->password, 0);
abca927d JK	249	}
	250
	251	static int run_credential_helper(struct credential *c,
	252	const char *cmd,
	253	int want_output)
	254	{
d3180279	255	struct child_process helper = CHILD_PROCESS_INIT;
abca927d JK	256	const char *argv[] = { NULL, NULL };
	257	FILE *fp;
	258
abca927d JK	259	argv[0] = cmd;
	260	helper.argv = argv;
	261	helper.use_shell = 1;
	262	helper.in = -1;
	263	if (want_output)
	264	helper.out = -1;
	265	else
	266	helper.no_stdout = 1;
	267
	268	if (start_command(&helper) < 0)
	269	return -1;
	270
	271	fp = xfdopen(helper.in, "w");
a0d51e8d	272	sigchain_push(SIGPIPE, SIG_IGN);
abca927d JK	273	credential_write(c, fp);
abca927d JK	274	fclose(fp);
a0d51e8d	275	sigchain_pop(SIGPIPE);
abca927d JK	276
	277	if (want_output) {
	278	int r;
	279	fp = xfdopen(helper.out, "r");
	280	r = credential_read(c, fp);
	281	fclose(fp);
	282	if (r < 0) {
	283	finish_command(&helper);
	284	return -1;
	285	}
	286	}
	287
	288	if (finish_command(&helper))
	289	return -1;
	290	return 0;
	291	}
	292
	293	static int credential_do(struct credential c, const char helper,
	294	const char *operation)
	295	{
	296	struct strbuf cmd = STRBUF_INIT;
	297	int r;
	298
	299	if (helper[0] == '!')
	300	strbuf_addstr(&cmd, helper + 1);
	301	else if (is_absolute_path(helper))
	302	strbuf_addstr(&cmd, helper);
	303	else
	304	strbuf_addf(&cmd, "git credential-%s", helper);
	305
	306	strbuf_addf(&cmd, " %s", operation);
	307	r = run_credential_helper(c, cmd.buf, !strcmp(operation, "get"));
	308
	309	strbuf_release(&cmd);
	310	return r;
	311	}
	312
	313	void credential_fill(struct credential *c)
	314	{
	315	int i;
	316
	317	if (c->username && c->password)
	318	return;
	319
11825072 JK	320	credential_apply_config(c);
11825072 JK	321
abca927d JK	322	for (i = 0; i < c->helpers.nr; i++) {
	323	credential_do(c, c->helpers.items[i].string, "get");
	324	if (c->username && c->password)
	325	return;
59b38652 JK	326	if (c->quit)
	327	die("credential helper '%s' told us to quit",
	328	c->helpers.items[i].string);
abca927d JK	329	}
	330
	331	credential_getpass(c);
	332	if (!c->username && !c->password)
	333	die("unable to get password from user");
	334	}
	335
	336	void credential_approve(struct credential *c)
	337	{
	338	int i;
	339
	340	if (c->approved)
	341	return;
	342	if (!c->username \|\| !c->password)
	343	return;
	344
11825072 JK	345	credential_apply_config(c);
11825072 JK	346
abca927d JK	347	for (i = 0; i < c->helpers.nr; i++)
	348	credential_do(c, c->helpers.items[i].string, "store");
	349	c->approved = 1;
	350	}
	351
	352	void credential_reject(struct credential *c)
	353	{
	354	int i;
	355
11825072 JK	356	credential_apply_config(c);
11825072 JK	357
abca927d JK	358	for (i = 0; i < c->helpers.nr; i++)
	359	credential_do(c, c->helpers.items[i].string, "erase");
	360
88ce3ef6 ÆAB	361	FREE_AND_NULL(c->username);
88ce3ef6 ÆAB	362	FREE_AND_NULL(c->password);
abca927d JK	363	c->approved = 0;
abca927d JK	364	}
d3e847c1	365
c716fe4b JK	366	static int check_url_component(const char *url, int quiet,
	367	const char name, const char value)
	368	{
	369	if (!value)
	370	return 0;
	371	if (!strchr(value, '\n'))
	372	return 0;
	373
	374	if (!quiet)
	375	warning(_("url contains a newline in its %s component: %s"),
	376	name, url);
	377	return -1;
	378	}
	379
	380	int credential_from_url_gently(struct credential c, const char url,
	381	int quiet)
d3e847c1 JK	382	{
	383	const char at, colon, cp, slash, host, proto_end;
	384
	385	credential_clear(c);
	386
	387	/*
	388	* Match one of:
	389	* (1) proto://<host>/...
	390	* (2) proto://<user>@<host>/...
	391	* (3) proto://<user>:<pass>@<host>/...
	392	*/
	393	proto_end = strstr(url, "://");
e7fab62b	394	if (!proto_end \|\| proto_end == url) {
c44088ec JN	395	if (!quiet)
	396	warning(_("url has no scheme: %s"), url);
	397	return -1;
	398	}
d3e847c1 JK	399	cp = proto_end + 3;
	400	at = strchr(cp, '@');
	401	colon = strchr(cp, ':');
	402	slash = strchrnul(cp, '/');
	403
	404	if (!at \|\| slash <= at) {
	405	/* Case (1) */
	406	host = cp;
	407	}
	408	else if (!colon \|\| at <= colon) {
	409	/* Case (2) */
	410	c->username = url_decode_mem(cp, at - cp);
82eb2498	411	if (c->username && *c->username)
82eb2498	412	c->username_from_proto = 1;
d3e847c1 JK	413	host = at + 1;
	414	} else {
	415	/* Case (3) */
	416	c->username = url_decode_mem(cp, colon - cp);
82eb2498	417	if (c->username && *c->username)
82eb2498	418	c->username_from_proto = 1;
d3e847c1 JK	419	c->password = url_decode_mem(colon + 1, at - (colon + 1));
	420	host = at + 1;
	421	}
	422
e7fab62b	423	c->protocol = xmemdupz(url, proto_end - url);
24036686	424	c->host = url_decode_mem(host, slash - host);
d3e847c1 JK	425	/* Trim leading and trailing slashes from path */
	426	while (*slash == '/')
	427	slash++;
	428	if (*slash) {
	429	char *p;
	430	c->path = url_decode(slash);
	431	p = c->path + strlen(c->path) - 1;
	432	while (p > c->path && *p == '/')
	433	*p-- = '\0';
	434	}
c716fe4b JK	435
	436	if (check_url_component(url, quiet, "username", c->username) < 0 \|\|
	437	check_url_component(url, quiet, "password", c->password) < 0 \|\|
	438	check_url_component(url, quiet, "protocol", c->protocol) < 0 \|\|
	439	check_url_component(url, quiet, "host", c->host) < 0 \|\|
	440	check_url_component(url, quiet, "path", c->path) < 0)
	441	return -1;
	442
	443	return 0;
	444	}
	445
	446	void credential_from_url(struct credential c, const char url)
	447	{
fe29a9b7 JK	448	if (credential_from_url_gently(c, url, 0) < 0)
fe29a9b7 JK	449	die(_("credential url cannot be parsed: %s"), url);
d3e847c1	450	}