#!/usr/bin/lua5.1
-- -*- Lua -*-
-- gitano-auth
--
-- Git (with) Augmented network operations -- User authentication wrapper
--
-- Copyright 2012 Daniel Silverstone <dsilvers@digital-scurf.org>
--
--

-- Gitano modules installed into /usr/share/lua/5.1/?.lua

local gitano = require "gitano"
local gall = require "gall"
local luxio = require "luxio"
local sio = require "luxio.simple"
local sp = require "luxio.subprocess"

gitano.config.lib_bin_path("/usr/lib/gitano/bin")
gitano.config.share_path("/usr/share/gitano")
gitano.i18n.set_langpack_path("/usr/share/gitano/lang") gitano.i18n.set_category()
gitano.plugins.load_plugins {"/etc/gitano/plugins", "/usr/lib/gitano/plugins"}

local start_log_level = gitano.log.get_level()
gitano.log.cap_level(gitano.log.level.INFO)
local transactionid = gitano.log.syslog.open()

local repo_root, user, keytag = ...

gitano.config.repo_path(repo_root)

local cmdline = luxio.getenv "SSH_ORIGINAL_COMMAND" or ""

if cmdline:match("^[ \t\n]*$") then
   gitano.log.fatal(gitano.i18n.expand("ERROR_NO_COMMAND"))
end

local authorized, cmd, parsed_cmdline, config, env, repo =
   gitano.auth.is_authorized(user, "ssh", cmdline, repo_root,
                             transactionid, start_log_level, keytag)

if authorized then
   local exit, quiet = gitano.util.run_command(cmd, cmdline, parsed_cmdline,
                                               user, config, env, repo)

   if exit ~= 0 then
      if not quiet then
         gitano.log.critical(gitano.i18n.expand("ERROR_COMMAND_FAILED"))
      end
      luxio._exit(exit)
   end
else
   gitano.log.fatal(gitano.i18n.expand("ERROR_NOT_AUTHORISED"))
end

gitano.log.syslog.close()

return 0
