team_auth_validator.go

package auth

import (
	"net/http"

	"github.com/concourse/atc/auth/provider"
	"github.com/concourse/atc/db"
)

type teamAuthValidator struct {
	teamFactory  db.TeamFactory
	jwtValidator Validator
}

func NewTeamAuthValidator(
	teamFactory db.TeamFactory,
	jwtValidator Validator,
) Validator {
	return &teamAuthValidator{
		teamFactory:  teamFactory,
		jwtValidator: jwtValidator,
	}
}

func (v teamAuthValidator) IsAuthenticated(r *http.Request) bool {
	teamName := r.FormValue(":team_name")
	team, found, err := v.teamFactory.FindTeam(teamName)
	if err != nil || !found {
		return false
	}

	if !isAuthConfigured(team) {
		return true
	}

	if team.BasicAuth != nil && NewBasicAuthValidator(team).IsAuthenticated(r) {
		return true
	}

	return v.jwtValidator.IsAuthenticated(r)

}

func isAuthConfigured(t db.Team) bool {
	if t.BasicAuth() != nil {
		return true
	}

	for name := range provider.GetProviders() {
		_, configured := t.Auth()[name]
		if configured {
			return true
		}
	}

	return false
}