aboutsummaryrefslogtreecommitdiff
path: root/src/main/java/org/jenkinsci/plugins/bbprb/BitbucketHookReceiver.java
blob: 355a90142fb3d91bbfb7b5ae089faed937ce857d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
package org.jenkinsci.plugins.bbprb;

import hudson.Extension;
import hudson.model.UnprotectedRootAction;
import hudson.security.ACL;
import hudson.security.csrf.CrumbExclusion;
import hudson.triggers.Trigger;
import hudson.triggers.TriggerDescriptor;
import java.io.IOException;
import java.net.URLDecoder;
import java.util.ArrayList;
import java.util.List;
import java.util.Map;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.servlet.FilterChain;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import jenkins.model.Jenkins;
import jenkins.model.ParameterizedJobMixIn.ParameterizedJob;
import net.sf.json.JSONException;
import net.sf.json.JSONObject;
import org.acegisecurity.context.SecurityContext;
import org.acegisecurity.context.SecurityContextHolder;
import org.apache.commons.io.IOUtils;
import org.kohsuke.stapler.StaplerRequest;
import org.kohsuke.stapler.StaplerResponse;

@Extension
public class BitbucketHookReceiver
    extends CrumbExclusion implements UnprotectedRootAction {

  private static final String BITBUCKET_HOOK_URL = "bbprb-hook";
  private static final String BITBUCKET_UA = "Bitbucket-Webhooks/2.0";

  @Override
  public boolean process(HttpServletRequest req, HttpServletResponse resp,
                         FilterChain chain)
      throws IOException, ServletException {
    String pathInfo = req.getPathInfo();
    if (pathInfo != null && pathInfo.startsWith("/" + BITBUCKET_HOOK_URL)) {
      chain.doFilter(req, resp);
      return true;
    }
    return false;
  }

  public void doIndex(StaplerRequest req, StaplerResponse resp)
      throws IOException {

    String userAgent = req.getHeader("user-agent");
    if (!BITBUCKET_UA.equals(userAgent)) {
      LOGGER.log(Level.WARNING, "Bad user agent: `{0}`, expected `{1}`",
                 new Object[] {userAgent, BITBUCKET_UA});
      resp.setStatus(StaplerResponse.SC_BAD_REQUEST);
      return;
    }

    String uri = req.getRequestURI();
    if (!uri.contains("/" + BITBUCKET_HOOK_URL + "/")) {
      LOGGER.log(Level.WARNING,
                 "BitBucket hook URI does not contain `/{0}/`: `{1}`",
                 new Object[] {BITBUCKET_HOOK_URL, uri});
      resp.setStatus(StaplerResponse.SC_NOT_FOUND);
      return;
    }

    String event = req.getHeader("x-event-key");
    if (event == null) {
      LOGGER.log(Level.WARNING, "Missing the `x-event-key` header");
      resp.setStatus(StaplerResponse.SC_BAD_REQUEST);
      return;
    }

    String body = IOUtils.toString(req.getInputStream());
    if (body.isEmpty()) {
      LOGGER.log(Level.WARNING, "Received empty request body");
      resp.setStatus(StaplerResponse.SC_BAD_REQUEST);
      return;
    }

    String contentType = req.getContentType();
    if (contentType != null &&
        contentType.startsWith("application/x-www-form-urlencoded")) {
      body = URLDecoder.decode(body, "UTF-8");
    }
    if (body.startsWith("payload=")) {
      body = body.substring(8);
    }

    LOGGER.log(Level.FINE,
               "Received commit hook notification, key: `{0}`, body: `{1}`",
               new Object[] {event, body});

    try {
      JSONObject payload = JSONObject.fromObject(body);
      if (event.startsWith("pullrequest:")) {
        JSONObject pr = payload.getJSONObject("pullrequest");
        for (BitbucketBuildTrigger trigger : getBitbucketTriggers()) {
          trigger.handlePR(event, pr);
        }
        return;
      }
    } catch (JSONException e) {
      LOGGER.log(Level.WARNING, e.getMessage());
      resp.setStatus(StaplerResponse.SC_BAD_REQUEST);
      return;
    }
  }

  private static List<BitbucketBuildTrigger> getBitbucketTriggers() {
    List<BitbucketBuildTrigger> bbtriggers = new ArrayList<>();

    SecurityContext orig = ACL.impersonate(ACL.SYSTEM);
    List<ParameterizedJob> jobs =
        Jenkins.getInstance().getAllItems(ParameterizedJob.class);
    SecurityContextHolder.setContext(orig);

    for (ParameterizedJob job : jobs) {
      String jobName = job.getFullName();
      LOGGER.log(Level.FINER, "Found job: `{0}`", jobName);

      Map<TriggerDescriptor, Trigger<?>> triggers = job.getTriggers();

      for (Trigger<?> trigger : triggers.values()) {
        if (trigger instanceof BitbucketBuildTrigger) {
          LOGGER.log(Level.FINE, "Will consider job: `{0}`", jobName);
          bbtriggers.add((BitbucketBuildTrigger)trigger);
        }
      }
    }

    return bbtriggers;
  }

  private static final Logger LOGGER =
      Logger.getLogger(BitbucketHookReceiver.class.getName());

  public String getIconFileName() {
    return null;
  }

  public String getDisplayName() {
    return null;
  }

  public String getUrlName() {
    return BITBUCKET_HOOK_URL;
  }
}