setting.go 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779
  1. // Copyright 2015 The Gogs Authors. All rights reserved.
  2. // Copyright 2018 Gitote. All rights reserved.
  3. //
  4. // This source code is licensed under the MIT license found in the
  5. // LICENSE file in the root directory of this source tree.
  6. package user
  7. import (
  8. "bytes"
  9. "encoding/base64"
  10. "fmt"
  11. "gitote/gitote/models"
  12. "gitote/gitote/models/errors"
  13. "gitote/gitote/pkg/context"
  14. "gitote/gitote/pkg/form"
  15. "gitote/gitote/pkg/mailer"
  16. "gitote/gitote/pkg/setting"
  17. "gitote/gitote/pkg/tool"
  18. "html/template"
  19. "image/png"
  20. "io/ioutil"
  21. "strings"
  22. "github.com/Unknwon/com"
  23. raven "github.com/getsentry/raven-go"
  24. "github.com/pquerna/otp"
  25. "github.com/pquerna/otp/totp"
  26. log "gopkg.in/clog.v1"
  27. )
  28. const (
  29. // SettingsProfileTPL page template
  30. SettingsProfileTPL = "user/settings/profile"
  31. // SettingsSocialTPL page template
  32. SettingsSocialTPL = "user/settings/social"
  33. // SettingsAvatarTPL page template
  34. SettingsAvatarTPL = "user/settings/avatar"
  35. // SettingsPasswordTPL page template
  36. SettingsPasswordTPL = "user/settings/password"
  37. // SettingsEmailsTPL page template
  38. SettingsEmailsTPL = "user/settings/email"
  39. // SettingsSSHKeysTPL page template
  40. SettingsSSHKeysTPL = "user/settings/sshkeys"
  41. // SettingsSecurityTPL page template
  42. SettingsSecurityTPL = "user/settings/security"
  43. // SettingsTwoFactorEnableTPL page template
  44. SettingsTwoFactorEnableTPL = "user/settings/two_factor_enable"
  45. // SettingsTwoFactorRecoveryCodesTPL page template
  46. SettingsTwoFactorRecoveryCodesTPL = "user/settings/two_factor_recovery_codes"
  47. // SettingsRepositoriesTPL page template
  48. SettingsRepositoriesTPL = "user/settings/repositories"
  49. // SettingsOrganizationsTPL page template
  50. SettingsOrganizationsTPL = "user/settings/organizations"
  51. // SettingsApplicationsTPL page template
  52. SettingsApplicationsTPL = "user/settings/applications"
  53. // SettingsEmbedsTPL page template
  54. SettingsEmbedsTPL = "user/settings/embeds"
  55. // SettingsDeleteTPL page template
  56. SettingsDeleteTPL = "user/settings/delete"
  57. // NotificationTPL page template
  58. NotificationTPL = "user/notification"
  59. )
  60. func Settings(c *context.Context) {
  61. c.Title("settings.profile")
  62. c.PageIs("SettingsProfile")
  63. c.Data["origin_name"] = c.User.Name
  64. c.Data["name"] = c.User.Name
  65. c.Data["company"] = c.User.Company
  66. c.Data["description"] = c.User.Description
  67. c.Data["full_name"] = c.User.FullName
  68. c.Data["email"] = c.User.Email
  69. c.Data["website"] = c.User.Website
  70. c.Data["location"] = c.User.Location
  71. c.Data["status"] = c.User.Status
  72. c.Data["themecolor"] = c.User.ThemeColor
  73. c.Data["is_beta"] = c.User.IsBeta
  74. c.Data["show_ads"] = c.User.ShowAds
  75. c.Data["private_email"] = c.User.PrivateEmail
  76. c.Data["private_profile"] = c.User.PrivateProfile
  77. c.Success(SettingsProfileTPL)
  78. }
  79. func SettingsPost(c *context.Context, f form.UpdateProfile) {
  80. c.Title("settings.profile")
  81. c.PageIs("SettingsProfile")
  82. c.Data["origin_name"] = c.User.Name
  83. if c.HasError() {
  84. c.Success(SettingsProfileTPL)
  85. return
  86. }
  87. // Non-local users are not allowed to change their username
  88. if c.User.IsLocal() {
  89. // Check if username characters have been changed
  90. if c.User.LowerName != strings.ToLower(f.Name) {
  91. if err := models.ChangeUserName(c.User, f.Name); err != nil {
  92. c.FormErr("Name")
  93. var msg string
  94. switch {
  95. case models.IsErrUserAlreadyExist(err):
  96. msg = c.Tr("form.username_been_taken")
  97. case models.IsErrNameReserved(err):
  98. msg = c.Tr("form.name_reserved")
  99. case models.IsErrNamePatternNotAllowed(err):
  100. msg = c.Tr("form.name_pattern_not_allowed")
  101. default:
  102. c.ServerError("ChangeUserName", err)
  103. return
  104. }
  105. c.RenderWithErr(msg, SettingsProfileTPL, &f)
  106. return
  107. }
  108. log.Trace("Username changed: %s -> %s", c.User.Name, f.Name)
  109. }
  110. // In case it's just a case change
  111. c.User.Name = f.Name
  112. c.User.LowerName = strings.ToLower(f.Name)
  113. }
  114. var email string = strings.ToLower(f.Email)
  115. if c.User.Email != email {
  116. if used, err := models.IsEmailUsed(email); used {
  117. c.FormErr("Email")
  118. c.RenderWithErr(c.Tr("form.email_been_used"), SettingsProfileTPL, &f)
  119. return
  120. } else if err != nil {
  121. c.ServerError("ChangeUserName", err)
  122. return
  123. }
  124. c.User.Email = email
  125. }
  126. c.User.FullName = f.FullName
  127. c.User.Company = f.Company
  128. c.User.Description = f.Description
  129. c.User.Website = f.Website
  130. c.User.Location = f.Location
  131. c.User.Status = f.Status
  132. c.User.ThemeColor = f.ThemeColor
  133. c.User.IsBeta = f.IsBeta
  134. c.User.ShowAds = f.ShowAds
  135. c.User.PrivateEmail = f.PrivateEmail
  136. c.User.PrivateProfile = f.PrivateProfile
  137. if err := models.UpdateUser(c.User); err != nil {
  138. c.ServerError("UpdateUser", err)
  139. return
  140. }
  141. c.Flash.Success(c.Tr("settings.update_profile_success"))
  142. c.SubURLRedirect("/user/settings")
  143. }
  144. func SettingsSocial(c *context.Context) {
  145. c.Title("settings.social")
  146. c.PageIs("SettingsSocial")
  147. c.Data["twitter"] = c.User.Twitter
  148. c.Data["linkedin"] = c.User.Linkedin
  149. c.Data["github"] = c.User.Github
  150. c.Data["devto"] = c.User.Devto
  151. c.Data["stackoverflow"] = c.User.Stackoverflow
  152. c.Data["reddit"] = c.User.Reddit
  153. c.Data["telegram"] = c.User.Telegram
  154. c.Data["codepen"] = c.User.Codepen
  155. c.Data["gitlab"] = c.User.Gitlab
  156. c.Success(SettingsSocialTPL)
  157. }
  158. func SettingsSocialPost(c *context.Context, f form.UpdateSocial) {
  159. c.Title("settings.profile")
  160. c.PageIs("SettingsProfile")
  161. c.Data["origin_name"] = c.User.Name
  162. if c.HasError() {
  163. c.Success(SettingsSocialTPL)
  164. return
  165. }
  166. c.User.Twitter = f.Twitter
  167. c.User.Linkedin = f.Linkedin
  168. c.User.Github = f.Github
  169. c.User.Devto = f.Devto
  170. c.User.Stackoverflow = f.Stackoverflow
  171. c.User.Reddit = f.Reddit
  172. c.User.Telegram = f.Telegram
  173. c.User.Codepen = f.Codepen
  174. c.User.Gitlab = f.Gitlab
  175. if err := models.UpdateUser(c.User); err != nil {
  176. c.ServerError("UpdateUser", err)
  177. return
  178. }
  179. c.Flash.Success(c.Tr("settings.update_social_success"))
  180. c.SubURLRedirect("/user/settings/social")
  181. }
  182. // FIXME: limit upload size
  183. func UpdateAvatarSetting(c *context.Context, f form.Avatar, ctxUser *models.User) error {
  184. ctxUser.UseCustomAvatar = f.Source == form.AVATAR_LOCAL
  185. if len(f.Gravatar) > 0 {
  186. ctxUser.Avatar = tool.MD5(f.Gravatar)
  187. ctxUser.AvatarEmail = f.Gravatar
  188. }
  189. if f.Avatar != nil && f.Avatar.Filename != "" {
  190. r, err := f.Avatar.Open()
  191. if err != nil {
  192. return fmt.Errorf("open avatar reader: %v", err)
  193. }
  194. defer r.Close()
  195. data, err := ioutil.ReadAll(r)
  196. if err != nil {
  197. return fmt.Errorf("read avatar content: %v", err)
  198. }
  199. if !tool.IsImageFile(data) {
  200. return errors.New(c.Tr("settings.uploaded_avatar_not_a_image"))
  201. }
  202. if err = ctxUser.UploadAvatar(data); err != nil {
  203. return fmt.Errorf("upload avatar: %v", err)
  204. }
  205. } else {
  206. // No avatar is uploaded but setting has been changed to enable,
  207. // generate a random one when needed.
  208. if ctxUser.UseCustomAvatar && !com.IsFile(ctxUser.CustomAvatarPath()) {
  209. if err := ctxUser.GenerateRandomAvatar(); err != nil {
  210. raven.CaptureErrorAndWait(err, nil)
  211. log.Error(2, "generate random avatar [%d]: %v", ctxUser.ID, err)
  212. }
  213. }
  214. }
  215. if err := models.UpdateUser(ctxUser); err != nil {
  216. return fmt.Errorf("update user: %v", err)
  217. }
  218. return nil
  219. }
  220. func SettingsAvatar(c *context.Context) {
  221. c.Title("settings.avatar")
  222. c.PageIs("SettingsAvatar")
  223. c.Success(SettingsAvatarTPL)
  224. }
  225. func SettingsAvatarPost(c *context.Context, f form.Avatar) {
  226. if err := UpdateAvatarSetting(c, f, c.User); err != nil {
  227. c.Flash.Error(err.Error())
  228. } else {
  229. c.Flash.Success(c.Tr("settings.update_avatar_success"))
  230. }
  231. c.SubURLRedirect("/user/settings/avatar")
  232. }
  233. func SettingsDeleteAvatar(c *context.Context) {
  234. if err := c.User.DeleteAvatar(); err != nil {
  235. c.Flash.Error(fmt.Sprintf("Failed to delete avatar: %v", err))
  236. }
  237. c.SubURLRedirect("/user/settings/avatar")
  238. }
  239. func SettingsPassword(c *context.Context) {
  240. c.Title("settings.password")
  241. c.PageIs("SettingsPassword")
  242. c.Success(SettingsPasswordTPL)
  243. }
  244. func SettingsPasswordPost(c *context.Context, f form.ChangePassword) {
  245. c.Title("settings.password")
  246. c.PageIs("SettingsPassword")
  247. if c.HasError() {
  248. c.Success(SettingsPasswordTPL)
  249. return
  250. }
  251. if !c.User.ValidatePassword(f.OldPassword) {
  252. c.Flash.Error(c.Tr("settings.password_incorrect"))
  253. } else if f.Password != f.Retype {
  254. c.Flash.Error(c.Tr("form.password_not_match"))
  255. } else {
  256. c.User.Passwd = f.Password
  257. var err error
  258. if c.User.Salt, err = models.GetUserSalt(); err != nil {
  259. c.ServerError("GetUserSalt", err)
  260. return
  261. }
  262. c.User.EncodePasswd()
  263. if err := models.UpdateUser(c.User); err != nil {
  264. c.ServerError("UpdateUser", err)
  265. return
  266. }
  267. c.Flash.Success(c.Tr("settings.change_password_success"))
  268. }
  269. c.SubURLRedirect("/user/settings/password")
  270. }
  271. func SettingsEmails(c *context.Context) {
  272. c.Title("settings.emails")
  273. c.PageIs("SettingsEmails")
  274. emails, err := models.GetEmailAddresses(c.User.ID)
  275. if err != nil {
  276. c.ServerError("GetEmailAddresses", err)
  277. return
  278. }
  279. c.Data["Emails"] = emails
  280. c.Success(SettingsEmailsTPL)
  281. }
  282. func SettingsEmailPost(c *context.Context, f form.AddEmail) {
  283. c.Title("settings.emails")
  284. c.PageIs("SettingsEmails")
  285. // Make emailaddress primary.
  286. if c.Query("_method") == "PRIMARY" {
  287. if err := models.MakeEmailPrimary(&models.EmailAddress{ID: c.QueryInt64("id")}); err != nil {
  288. c.ServerError("MakeEmailPrimary", err)
  289. return
  290. }
  291. c.SubURLRedirect("/user/settings/email")
  292. return
  293. }
  294. // Add Email address.
  295. emails, err := models.GetEmailAddresses(c.User.ID)
  296. if err != nil {
  297. c.ServerError("GetEmailAddresses", err)
  298. return
  299. }
  300. c.Data["Emails"] = emails
  301. if c.HasError() {
  302. c.Success(SettingsEmailsTPL)
  303. return
  304. }
  305. email := &models.EmailAddress{
  306. UID: c.User.ID,
  307. Email: f.Email,
  308. IsActivated: !setting.Service.RegisterEmailConfirm,
  309. }
  310. if err := models.AddEmailAddress(email); err != nil {
  311. if models.IsErrEmailAlreadyUsed(err) {
  312. c.RenderWithErr(c.Tr("form.email_been_used"), SettingsEmailsTPL, &f)
  313. } else {
  314. c.ServerError("AddEmailAddress", err)
  315. }
  316. return
  317. }
  318. // Send confirmation email
  319. if setting.Service.RegisterEmailConfirm {
  320. mailer.SendActivateEmailMail(c.Context, models.NewMailerUser(c.User), email.Email)
  321. if err := c.Cache.Put("MailResendLimit_"+c.User.LowerName, c.User.LowerName, 180); err != nil {
  322. raven.CaptureErrorAndWait(err, nil)
  323. log.Error(2, "Set cache 'MailResendLimit' failed: %v", err)
  324. }
  325. c.Flash.Info(c.Tr("settings.add_email_confirmation_sent", email.Email, setting.Service.ActiveCodeLives/60))
  326. } else {
  327. c.Flash.Success(c.Tr("settings.add_email_success"))
  328. }
  329. c.SubURLRedirect("/user/settings/email")
  330. }
  331. func DeleteEmail(c *context.Context) {
  332. if err := models.DeleteEmailAddress(&models.EmailAddress{
  333. ID: c.QueryInt64("id"),
  334. UID: c.User.ID,
  335. }); err != nil {
  336. c.ServerError("DeleteEmailAddress", err)
  337. return
  338. }
  339. c.Flash.Success(c.Tr("settings.email_deletion_success"))
  340. c.JSONSuccess(map[string]interface{}{
  341. "redirect": setting.AppSubURL + "/user/settings/email",
  342. })
  343. }
  344. func SettingsSSHKeys(c *context.Context) {
  345. c.Title("settings.ssh_keys")
  346. c.PageIs("SettingsSSHKeys")
  347. keys, err := models.ListPublicKeys(c.User.ID)
  348. if err != nil {
  349. c.ServerError("ListPublicKeys", err)
  350. return
  351. }
  352. c.Data["Keys"] = keys
  353. c.Success(SettingsSSHKeysTPL)
  354. }
  355. func SettingsSSHKeysPost(c *context.Context, f form.AddSSHKey) {
  356. c.Title("settings.ssh_keys")
  357. c.PageIs("SettingsSSHKeys")
  358. keys, err := models.ListPublicKeys(c.User.ID)
  359. if err != nil {
  360. c.ServerError("ListPublicKeys", err)
  361. return
  362. }
  363. c.Data["Keys"] = keys
  364. if c.HasError() {
  365. c.Success(SettingsSSHKeysTPL)
  366. return
  367. }
  368. content, err := models.CheckPublicKeyString(f.Content)
  369. if err != nil {
  370. if models.IsErrKeyUnableVerify(err) {
  371. c.Flash.Info(c.Tr("form.unable_verify_ssh_key"))
  372. } else {
  373. c.Flash.Error(c.Tr("form.invalid_ssh_key", err.Error()))
  374. c.SubURLRedirect("/user/settings/ssh")
  375. return
  376. }
  377. }
  378. if _, err = models.AddPublicKey(c.User.ID, f.Title, content); err != nil {
  379. c.Data["HasError"] = true
  380. switch {
  381. case models.IsErrKeyAlreadyExist(err):
  382. c.FormErr("Content")
  383. c.RenderWithErr(c.Tr("settings.ssh_key_been_used"), SettingsSSHKeysTPL, &f)
  384. case models.IsErrKeyNameAlreadyUsed(err):
  385. c.FormErr("Title")
  386. c.RenderWithErr(c.Tr("settings.ssh_key_name_used"), SettingsSSHKeysTPL, &f)
  387. default:
  388. c.ServerError("AddPublicKey", err)
  389. }
  390. return
  391. }
  392. c.Flash.Success(c.Tr("settings.add_key_success", f.Title))
  393. c.SubURLRedirect("/user/settings/ssh")
  394. }
  395. func DeleteSSHKey(c *context.Context) {
  396. if err := models.DeletePublicKey(c.User, c.QueryInt64("id")); err != nil {
  397. c.Flash.Error("DeletePublicKey: " + err.Error())
  398. } else {
  399. c.Flash.Success(c.Tr("settings.ssh_key_deletion_success"))
  400. }
  401. c.JSONSuccess(map[string]interface{}{
  402. "redirect": setting.AppSubURL + "/user/settings/ssh",
  403. })
  404. }
  405. func SettingsSecurity(c *context.Context) {
  406. c.Title("settings.security")
  407. c.PageIs("SettingsSecurity")
  408. t, err := models.GetTwoFactorByUserID(c.UserID())
  409. if err != nil && !errors.IsTwoFactorNotFound(err) {
  410. c.ServerError("GetTwoFactorByUserID", err)
  411. return
  412. }
  413. c.Data["TwoFactor"] = t
  414. c.Success(SettingsSecurityTPL)
  415. }
  416. func SettingsTwoFactorEnable(c *context.Context) {
  417. if c.User.IsEnabledTwoFactor() {
  418. c.NotFound()
  419. return
  420. }
  421. c.Title("settings.two_factor_enable_title")
  422. c.PageIs("SettingsSecurity")
  423. var key *otp.Key
  424. var err error
  425. keyURL := c.Session.Get("twoFactorURL")
  426. if keyURL != nil {
  427. key, _ = otp.NewKeyFromURL(keyURL.(string))
  428. }
  429. if key == nil {
  430. key, err = totp.Generate(totp.GenerateOpts{
  431. Issuer: "Gitote",
  432. AccountName: c.User.Email,
  433. })
  434. if err != nil {
  435. c.ServerError("Generate", err)
  436. return
  437. }
  438. }
  439. c.Data["TwoFactorSecret"] = key.Secret()
  440. img, err := key.Image(240, 240)
  441. if err != nil {
  442. c.ServerError("Image", err)
  443. return
  444. }
  445. var buf bytes.Buffer
  446. if err = png.Encode(&buf, img); err != nil {
  447. c.ServerError("Encode", err)
  448. return
  449. }
  450. c.Data["QRCode"] = template.URL("data:image/png;base64," + base64.StdEncoding.EncodeToString(buf.Bytes()))
  451. c.Session.Set("twoFactorSecret", c.Data["TwoFactorSecret"])
  452. c.Session.Set("twoFactorURL", key.String())
  453. c.Success(SettingsTwoFactorEnableTPL)
  454. }
  455. func SettingsTwoFactorEnablePost(c *context.Context) {
  456. secret, ok := c.Session.Get("twoFactorSecret").(string)
  457. if !ok {
  458. c.NotFound()
  459. return
  460. }
  461. if !totp.Validate(c.Query("passcode"), secret) {
  462. c.Flash.Error(c.Tr("settings.two_factor_invalid_passcode"))
  463. c.SubURLRedirect("/user/settings/security/two_factor_enable")
  464. return
  465. }
  466. if err := models.NewTwoFactor(c.UserID(), secret); err != nil {
  467. c.Flash.Error(c.Tr("settings.two_factor_enable_error", err))
  468. c.SubURLRedirect("/user/settings/security/two_factor_enable")
  469. return
  470. }
  471. c.Session.Delete("twoFactorSecret")
  472. c.Session.Delete("twoFactorURL")
  473. c.Flash.Success(c.Tr("settings.two_factor_enable_success"))
  474. c.SubURLRedirect("/user/settings/security/two_factor_recovery_codes")
  475. }
  476. func SettingsTwoFactorRecoveryCodes(c *context.Context) {
  477. if !c.User.IsEnabledTwoFactor() {
  478. c.NotFound()
  479. return
  480. }
  481. c.Title("settings.two_factor_recovery_codes_title")
  482. c.PageIs("SettingsSecurity")
  483. recoveryCodes, err := models.GetRecoveryCodesByUserID(c.UserID())
  484. if err != nil {
  485. c.ServerError("GetRecoveryCodesByUserID", err)
  486. return
  487. }
  488. c.Data["RecoveryCodes"] = recoveryCodes
  489. c.Success(SettingsTwoFactorRecoveryCodesTPL)
  490. }
  491. func SettingsTwoFactorRecoveryCodesPost(c *context.Context) {
  492. if !c.User.IsEnabledTwoFactor() {
  493. c.NotFound()
  494. return
  495. }
  496. if err := models.RegenerateRecoveryCodes(c.UserID()); err != nil {
  497. c.Flash.Error(c.Tr("settings.two_factor_regenerate_recovery_codes_error", err))
  498. } else {
  499. c.Flash.Success(c.Tr("settings.two_factor_regenerate_recovery_codes_success"))
  500. }
  501. c.SubURLRedirect("/user/settings/security/two_factor_recovery_codes")
  502. }
  503. func SettingsTwoFactorDisable(c *context.Context) {
  504. if !c.User.IsEnabledTwoFactor() {
  505. c.NotFound()
  506. return
  507. }
  508. if err := models.DeleteTwoFactor(c.UserID()); err != nil {
  509. c.ServerError("DeleteTwoFactor", err)
  510. return
  511. }
  512. c.Flash.Success(c.Tr("settings.two_factor_disable_success"))
  513. c.JSONSuccess(map[string]interface{}{
  514. "redirect": setting.AppSubURL + "/user/settings/security",
  515. })
  516. }
  517. func SettingsRepos(c *context.Context) {
  518. c.Title("settings.repos")
  519. c.PageIs("SettingsRepositories")
  520. repos, err := models.GetUserAndCollaborativeRepositories(c.User.ID)
  521. if err != nil {
  522. c.ServerError("GetUserAndCollaborativeRepositories", err)
  523. return
  524. }
  525. if err = models.RepositoryList(repos).LoadAttributes(); err != nil {
  526. c.ServerError("LoadAttributes", err)
  527. return
  528. }
  529. c.Data["Repos"] = repos
  530. c.Success(SettingsRepositoriesTPL)
  531. }
  532. func SettingsLeaveRepo(c *context.Context) {
  533. repo, err := models.GetRepositoryByID(c.QueryInt64("id"))
  534. if err != nil {
  535. c.NotFoundOrServerError("GetRepositoryByID", errors.IsRepoNotExist, err)
  536. return
  537. }
  538. if err = repo.DeleteCollaboration(c.User.ID); err != nil {
  539. c.ServerError("DeleteCollaboration", err)
  540. return
  541. }
  542. c.Flash.Success(c.Tr("settings.repos.leave_success", repo.FullName()))
  543. c.JSONSuccess(map[string]interface{}{
  544. "redirect": setting.AppSubURL + "/user/settings/repositories",
  545. })
  546. }
  547. func SettingsOrganizations(c *context.Context) {
  548. c.Title("settings.orgs")
  549. c.PageIs("SettingsOrganizations")
  550. orgs, err := models.GetOrgsByUserID(c.User.ID, true)
  551. if err != nil {
  552. c.ServerError("GetOrgsByUserID", err)
  553. return
  554. }
  555. c.Data["Orgs"] = orgs
  556. c.Success(SettingsOrganizationsTPL)
  557. }
  558. func SettingsLeaveOrganization(c *context.Context) {
  559. if err := models.RemoveOrgUser(c.QueryInt64("id"), c.User.ID); err != nil {
  560. if models.IsErrLastOrgOwner(err) {
  561. c.Flash.Error(c.Tr("form.last_org_owner"))
  562. } else {
  563. c.ServerError("RemoveOrgUser", err)
  564. return
  565. }
  566. }
  567. c.JSONSuccess(map[string]interface{}{
  568. "redirect": setting.AppSubURL + "/user/settings/organizations",
  569. })
  570. }
  571. func SettingsApplications(c *context.Context) {
  572. c.Title("settings.applications")
  573. c.PageIs("SettingsApplications")
  574. tokens, err := models.ListAccessTokens(c.User.ID)
  575. if err != nil {
  576. c.ServerError("ListAccessTokens", err)
  577. return
  578. }
  579. c.Data["Tokens"] = tokens
  580. c.Success(SettingsApplicationsTPL)
  581. }
  582. func SettingsApplicationsPost(c *context.Context, f form.NewAccessToken) {
  583. c.Title("settings.applications")
  584. c.PageIs("SettingsApplications")
  585. if c.HasError() {
  586. tokens, err := models.ListAccessTokens(c.User.ID)
  587. if err != nil {
  588. c.ServerError("ListAccessTokens", err)
  589. return
  590. }
  591. c.Data["Tokens"] = tokens
  592. c.Success(SettingsApplicationsTPL)
  593. return
  594. }
  595. t := &models.AccessToken{
  596. UID: c.User.ID,
  597. Name: f.Name,
  598. }
  599. if err := models.NewAccessToken(t); err != nil {
  600. c.ServerError("NewAccessToken", err)
  601. return
  602. }
  603. c.Flash.Success(c.Tr("settings.generate_token_succeeds"))
  604. c.Flash.Info(t.Sha1)
  605. c.SubURLRedirect("/user/settings/applications")
  606. }
  607. func SettingsDeleteApplication(c *context.Context) {
  608. if err := models.DeleteAccessTokenOfUserByID(c.User.ID, c.QueryInt64("id")); err != nil {
  609. c.Flash.Error("DeleteAccessTokenByID: " + err.Error())
  610. } else {
  611. c.Flash.Success(c.Tr("settings.delete_token_success"))
  612. }
  613. c.JSONSuccess(map[string]interface{}{
  614. "redirect": setting.AppSubURL + "/user/settings/applications",
  615. })
  616. }
  617. func SettingsEmbeds(c *context.Context) {
  618. c.Title("settings.embeds")
  619. c.PageIs("SettingsEmbeds")
  620. c.Success(SettingsEmbedsTPL)
  621. }
  622. func SettingsDelete(c *context.Context) {
  623. c.Title("settings.delete")
  624. c.PageIs("SettingsDelete")
  625. if c.Req.Method == "POST" {
  626. if _, err := models.UserLogin(c.User.Name, c.Query("password"), c.User.LoginSource); err != nil {
  627. if errors.IsUserNotExist(err) {
  628. c.RenderWithErr(c.Tr("form.enterred_invalid_password"), SettingsDeleteTPL, nil)
  629. } else {
  630. c.ServerError("UserLogin", err)
  631. }
  632. return
  633. }
  634. if err := models.DeleteUser(c.User); err != nil {
  635. switch {
  636. case models.IsErrUserOwnRepos(err):
  637. c.Flash.Error(c.Tr("form.still_own_repo"))
  638. c.Redirect(setting.AppSubURL + "/user/settings/delete")
  639. case models.IsErrUserHasOrgs(err):
  640. c.Flash.Error(c.Tr("form.still_has_org"))
  641. c.Redirect(setting.AppSubURL + "/user/settings/delete")
  642. default:
  643. c.ServerError("DeleteUser", err)
  644. }
  645. } else {
  646. log.Trace("Account deleted: %s", c.User.Name)
  647. c.Redirect(setting.AppSubURL + "/")
  648. }
  649. return
  650. }
  651. c.Success(SettingsDeleteTPL)
  652. }