Examples with JschConfigSessionFactory org.eclipse.jgit.transport.JschConfigSessionFactory used on opensource projects

Example 6 with JschConfigSessionFactory

use of org.eclipse.jgit.transport.JschConfigSessionFactory in project che by eclipse.

the class JGitConnection method executeRemoteCommand.

/**
     * Execute remote jgit command.
     *
     * @param remoteUrl
     *         remote url
     * @param command
     *         command to execute
     * @return executed command
     * @throws GitException
     * @throws GitAPIException
     * @throws UnauthorizedException
     */
@VisibleForTesting
Object executeRemoteCommand(String remoteUrl, TransportCommand command, @Nullable String username, @Nullable String password) throws GitException, GitAPIException, UnauthorizedException {
    File keyDirectory = null;
    UserCredential credentials = null;
    try {
        if (GitUrlUtils.isSSH(remoteUrl)) {
            keyDirectory = Files.createTempDir();
            final File sshKey = writePrivateKeyFile(remoteUrl, keyDirectory);
            SshSessionFactory sshSessionFactory = new JschConfigSessionFactory() {

                @Override
                protected void configure(OpenSshConfig.Host host, Session session) {
                    session.setConfig("StrictHostKeyChecking", "no");
                }

                @Override
                protected JSch getJSch(final OpenSshConfig.Host hc, FS fs) throws JSchException {
                    JSch jsch = super.getJSch(hc, fs);
                    jsch.removeAllIdentity();
                    jsch.addIdentity(sshKey.getAbsolutePath());
                    return jsch;
                }
            };
            command.setTransportConfigCallback(transport -> {
                if (transport instanceof SshTransport) {
                    ((SshTransport) transport).setSshSessionFactory(sshSessionFactory);
                }
            });
        } else {
            if (remoteUrl != null && GIT_URL_WITH_CREDENTIALS_PATTERN.matcher(remoteUrl).matches()) {
                username = remoteUrl.substring(remoteUrl.indexOf("://") + 3, remoteUrl.lastIndexOf(":"));
                password = remoteUrl.substring(remoteUrl.lastIndexOf(":") + 1, remoteUrl.indexOf("@"));
                command.setCredentialsProvider(new UsernamePasswordCredentialsProvider(username, password));
            } else {
                if (username != null && password != null) {
                    command.setCredentialsProvider(new UsernamePasswordCredentialsProvider(username, password));
                } else {
                    credentials = credentialsLoader.getUserCredential(remoteUrl);
                    if (credentials != null) {
                        command.setCredentialsProvider(new UsernamePasswordCredentialsProvider(credentials.getUserName(), credentials.getPassword()));
                    }
                }
            }
        }
        ProxyAuthenticator.initAuthenticator(remoteUrl);
        return command.call();
    } catch (GitException | TransportException exception) {
        if ("Unable get private ssh key".equals(exception.getMessage())) {
            throw new UnauthorizedException(exception.getMessage(), ErrorCodes.UNABLE_GET_PRIVATE_SSH_KEY);
        } else if (exception.getMessage().contains(ERROR_AUTHENTICATION_REQUIRED)) {
            final ProviderInfo info = credentialsLoader.getProviderInfo(remoteUrl);
            if (info != null) {
                throw new UnauthorizedException(exception.getMessage(), ErrorCodes.UNAUTHORIZED_GIT_OPERATION, ImmutableMap.of(PROVIDER_NAME, info.getProviderName(), AUTHENTICATE_URL, info.getAuthenticateUrl(), "authenticated", Boolean.toString(credentials != null)));
            }
            throw new UnauthorizedException(exception.getMessage(), ErrorCodes.UNAUTHORIZED_GIT_OPERATION);
        } else {
            throw exception;
        }
    } finally {
        if (keyDirectory != null && keyDirectory.exists()) {
            try {
                FileUtils.delete(keyDirectory, FileUtils.RECURSIVE);
            } catch (IOException exception) {
                throw new GitException("Can't remove SSH key directory", exception);
            }
        }
        ProxyAuthenticator.resetAuthenticator();
    }
}

Example 7 with JschConfigSessionFactory

use of org.eclipse.jgit.transport.JschConfigSessionFactory in project blueocean-plugin by jenkinsci.

the class GitUtils method getSSHKeyTransport.

private static TransportConfigCallback getSSHKeyTransport(final BasicSSHUserPrivateKey privateKey) {
    final SshSessionFactory sshSessionFactory = new JschConfigSessionFactory() {

        @Override
        protected void configure(OpenSshConfig.Host hc, com.jcraft.jsch.Session session) {
            // jenkins user doesn't likely have the host key
            session.setConfig("StrictHostKeyChecking", "no");
        }

        @Override
        protected JSch getJSch(OpenSshConfig.Host hc, FS fs) throws JSchException {
            JSch jsch = new JSch();
            configureJSch(jsch);
            // TODO: might need this: jsch.setHostKeyRepository(new KnownHosts(this));
            KeyPair pair = KeyPair.load(jsch, privateKey.getPrivateKey().getBytes(StandardCharsets.UTF_8), null);
            byte[] passphrase = new byte[0];
            jsch.addIdentity(privateKey.getUsername(), pair.forSSHAgent(), null, passphrase);
            return jsch;
        }
    };
    return transport -> {
        if (transport instanceof SshTransport) {
            SshTransport sshTransport = (SshTransport) transport;
            sshTransport.setSshSessionFactory(sshSessionFactory);
        }
    };
}

Example 8 with JschConfigSessionFactory

use of org.eclipse.jgit.transport.JschConfigSessionFactory in project CzechIdMng by bcvsolutions.

the class AbstractReleaseManager method getTransportConfigCallback.

/**
 * Append credentials to git active operations
 *
 * @return
 */
protected TransportConfigCallback getTransportConfigCallback() {
    return new TransportConfigCallback() {

        @Override
        public void configure(Transport transport) {
            // 
            transport.setCredentialsProvider(getCredentialsProvider());
            // 
            if (transport instanceof SshTransport) {
                SshTransport sshTransport = (SshTransport) transport;
                // 
                sshTransport.setSshSessionFactory(new JschConfigSessionFactory() {

                    @Override
                    protected void configure(Host host, Session session) {
                        if (password != null) {
                            session.setPassword(password.asString());
                            // 
                            LOG.info("Ssh passphrase given, will be set for ssh public key ...");
                        }
                    }
                });
            } else {
                if (username == null || password == null) {
                    LOG.warn("No credentials given. Set git username and password, if repository authentication is needed.");
                } else {
                    LOG.info("Git credentials given, username [{}].", username);
                }
            }
        }
    };
}

Example 9 with JschConfigSessionFactory

use of org.eclipse.jgit.transport.JschConfigSessionFactory in project archi-modelrepository-plugin by archi-contribs.

the class CredentialsAuthenticator method getTransportConfigCallback.

/**
 * Factory method to get the default TransportConfigCallback for authentication for repoURL
 * npw can be null and is ignored if repoURL is SSH
 */
public static TransportConfigCallback getTransportConfigCallback(final String repoURL, final UsernamePassword npw) throws IOException {
    // SSH
    if (GraficoUtils.isSSH(repoURL)) {
        return new TransportConfigCallback() {

            @Override
            public void configure(Transport transport) {
                // Delete remote branches that we don't have
                transport.setRemoveDeletedRefs(true);
                if (transport instanceof SshTransport) {
                    ((SshTransport) transport).setSshSessionFactory(getSshSessionFactory());
                }
            }

            protected SshSessionFactory getSshSessionFactory() {
                return new JschConfigSessionFactory() {

                    @Override
                    protected void configure(OpenSshConfig.Host host, Session session) {
                        // $NON-NLS-1$ //$NON-NLS-2$
                        session.setConfig("StrictHostKeyChecking", "no");
                    }

                    @Override
                    protected JSch createDefaultJSch(FS fs) throws JSchException {
                        JSch jsch = super.createDefaultJSch(fs);
                        // TODO - we might not need to do this as it sets default locations for rsa_pub
                        jsch.removeAllIdentity();
                        File file = null;
                        char[] pw = null;
                        try {
                            file = sshIdentityProvider.getIdentityFile();
                            pw = sshIdentityProvider.getIdentityPassword();
                        } catch (IOException | GeneralSecurityException ex) {
                            throw new JSchException(ex.getMessage());
                        }
                        if (pw != null) {
                            jsch.addIdentity(file.getAbsolutePath(), new String(pw));
                        } else {
                            jsch.addIdentity(file.getAbsolutePath());
                        }
                        return jsch;
                    }
                };
            }
        };
    }
    // HTTP
    if (npw != null) {
        return new TransportConfigCallback() {

            @Override
            public void configure(Transport transport) {
                transport.setCredentialsProvider(new UsernamePasswordCredentialsProvider(npw.getUsername(), npw.getPassword()));
                // Delete remote branches that we don't have
                transport.setRemoveDeletedRefs(true);
            }
        };
    }
    // $NON-NLS-1$
    throw new IOException(Messages.CredentialsAuthenticator_2 + " " + repoURL);
}

Example 10 with JschConfigSessionFactory

use of org.eclipse.jgit.transport.JschConfigSessionFactory in project fabric8 by fabric8io.

the class GitUtils method configureCommand.

/**
 * Configures the transport of the command to deal with things like SSH
 */
public static <C extends GitCommand> void configureCommand(TransportCommand<C, ?> command, CredentialsProvider credentialsProvider, final File sshPrivateKey, final File sshPublicKey) {
    LOG.info("Using " + credentialsProvider);
    if (sshPrivateKey != null) {
        final CredentialsProvider provider = credentialsProvider;
        command.setTransportConfigCallback(new TransportConfigCallback() {

            @Override
            public void configure(Transport transport) {
                if (transport instanceof SshTransport) {
                    SshTransport sshTransport = (SshTransport) transport;
                    SshSessionFactory sshSessionFactory = new JschConfigSessionFactory() {

                        @Override
                        protected void configure(OpenSshConfig.Host host, Session session) {
                            session.setConfig("StrictHostKeyChecking", "no");
                            UserInfo userInfo = new CredentialsProviderUserInfo(session, provider);
                            session.setUserInfo(userInfo);
                        }

                        @Override
                        protected JSch createDefaultJSch(FS fs) throws JSchException {
                            JSch jsch = super.createDefaultJSch(fs);
                            jsch.removeAllIdentity();
                            String absolutePath = sshPrivateKey.getAbsolutePath();
                            if (LOG.isDebugEnabled()) {
                                LOG.debug("Adding identity privateKey: " + sshPrivateKey + " publicKey: " + sshPublicKey);
                            }
                            if (sshPublicKey != null) {
                                jsch.addIdentity(absolutePath, sshPublicKey.getAbsolutePath(), null);
                            } else {
                                jsch.addIdentity(absolutePath);
                            }
                            return jsch;
                        }
                    };
                    sshTransport.setSshSessionFactory(sshSessionFactory);
                }
            }
        });
    }
}