BigW Consortium Gitlab

auth_helper.rb 2.04 KB
Newer Older
1
module AuthHelper
2
  PROVIDERS_WITH_ICONS = %w(twitter github gitlab bitbucket google_oauth2 facebook azure_oauth2).freeze
3
  FORM_BASED_PROVIDERS = [/\Aldap/, 'crowd'].freeze
4 5 6 7 8

  def ldap_enabled?
    Gitlab.config.ldap.enabled
  end

9 10 11 12
  def omniauth_enabled?
    Gitlab.config.omniauth.enabled
  end

13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
  def provider_has_icon?(name)
    PROVIDERS_WITH_ICONS.include?(name.to_s)
  end

  def auth_providers
    Gitlab::OAuth::Provider.providers
  end

  def label_for_provider(name)
    Gitlab::OAuth::Provider.label_for(name)
  end

  def form_based_provider?(name)
    FORM_BASED_PROVIDERS.any? { |pattern| pattern === name.to_s }
  end

  def form_based_providers
    auth_providers.select { |provider| form_based_provider?(provider) }
  end

Valery Sizov committed
33 34 35 36
  def crowd_enabled?
    auth_providers.include? :crowd
  end

37 38 39 40
  def button_based_providers
    auth_providers.reject { |provider| form_based_provider?(provider) }
  end

41 42 43 44 45 46
  def enabled_button_based_providers
    disabled_providers = current_application_settings.disabled_oauth_sign_in_sources || []

    button_based_providers.map(&:to_s) - disabled_providers
  end

47
  def button_based_providers_enabled?
48
    enabled_button_based_providers.any?
49 50
  end

51 52 53 54 55 56
  def provider_image_tag(provider, size = 64)
    label = label_for_provider(provider)

    if provider_has_icon?(provider)
      file_name = "#{provider.to_s.split('_').first}_#{size}.png"

57
      image_tag("auth_buttons/#{file_name}", alt: label, title: "Sign in with #{label}")
58 59 60 61 62 63 64 65 66
    else
      label
    end
  end

  def auth_active?(provider)
    current_user.identities.exists?(provider: provider.to_s)
  end

67 68 69 70 71 72 73 74 75 76 77 78
  def two_factor_skippable?
    current_application_settings.require_two_factor_authentication &&
      !current_user.two_factor_enabled &&
      current_application_settings.two_factor_grace_period &&
      !two_factor_grace_period_expired?
  end

  def two_factor_grace_period_expired?
    current_user.otp_grace_period_started_at &&
      (current_user.otp_grace_period_started_at + current_application_settings.two_factor_grace_period.hours) < Time.current
  end

79 80
  extend self
end