snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

server/channels/app/oauthproviders/gitlab/gitlab.go

@@ -0,0 +1,119 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+package oauthgitlab
+
+import (
+	"encoding/json"
+	"errors"
+	"io"
+	"strconv"
+	"strings"
+
+	"github.com/mattermost/mattermost/server/public/model"
+	"github.com/mattermost/mattermost/server/public/shared/mlog"
+	"github.com/mattermost/mattermost/server/public/shared/request"
+	"github.com/mattermost/mattermost/server/v8/einterfaces"
+)
+
+type GitLabProvider struct {
+}
+
+type GitLabUser struct {
+	Id                int64  `json:"id"`
+	Username          string `json:"username"`
+	Login             string `json:"login"`
+	Email             string `json:"email"`
+	Name              string `json:"name"`
+	PreferredUsername string `json:"preferred_username"`
+}
+
+func init() {
+	provider := &GitLabProvider{}
+	einterfaces.RegisterOAuthProvider(model.UserAuthServiceGitlab, provider)
+}
+
+func userFromGitLabUser(logger mlog.LoggerIFace, glu *GitLabUser, settings *model.SSOSettings) *model.User {
+	user := &model.User{}
+
+	// set username in order of preference
+	var username string
+	if settings != nil && model.SafeDereference(settings.UsePreferredUsername) && glu.PreferredUsername != "" {
+		// to maintain consistency with other providers, we split the username by @ (if present) and
+		// take the first part (but only for the preferred username)
+		username = strings.Split(glu.PreferredUsername, "@")[0]
+	} else if glu.Username != "" {
+		username = glu.Username
+	} else {
+		username = glu.Login
+	}
+	user.Username = model.CleanUsername(logger, username)
+
+	splitName := strings.Split(glu.Name, " ")
+	if len(splitName) == 2 {
+		user.FirstName = splitName[0]
+		user.LastName = splitName[1]
+	} else if len(splitName) >= 2 {
+		user.FirstName = splitName[0]
+		user.LastName = strings.Join(splitName[1:], " ")
+	} else {
+		user.FirstName = glu.Name
+	}
+	user.Email = glu.Email
+	user.Email = strings.ToLower(user.Email)
+	userId := glu.getAuthData()
+	user.AuthData = &userId
+	user.AuthService = model.UserAuthServiceGitlab
+
+	return user
+}
+
+func gitLabUserFromJSON(data io.Reader) (*GitLabUser, error) {
+	decoder := json.NewDecoder(data)
+	var glu GitLabUser
+	err := decoder.Decode(&glu)
+	if err != nil {
+		return nil, err
+	}
+	return &glu, nil
+}
+
+func (glu *GitLabUser) IsValid() error {
+	if glu.Id == 0 {
+		return errors.New("user id can't be 0")
+	}
+
+	if glu.Email == "" {
+		return errors.New("user e-mail should not be empty")
+	}
+
+	return nil
+}
+
+func (glu *GitLabUser) getAuthData() string {
+	return strconv.FormatInt(glu.Id, 10)
+}
+
+func (gp *GitLabProvider) GetUserFromJSON(rctx request.CTX, data io.Reader, tokenUser *model.User, settings *model.SSOSettings) (*model.User, error) {
+	glu, err := gitLabUserFromJSON(data)
+	if err != nil {
+		return nil, err
+	}
+	if err = glu.IsValid(); err != nil {
+		return nil, err
+	}
+
+	return userFromGitLabUser(rctx.Logger(), glu, settings), nil
+}
+
+func (gp *GitLabProvider) GetSSOSettings(_ request.CTX, config *model.Config, service string) (*model.SSOSettings, error) {
+	return &config.GitLabSettings, nil
+}
+
+func (gp *GitLabProvider) GetUserFromIdToken(_ request.CTX, idToken string) (*model.User, error) {
+	return nil, nil
+}
+
+func (gp *GitLabProvider) IsSameUser(_ request.CTX, dbUser, oauthUser *model.User) bool {
+	return dbUser.AuthData == oauthUser.AuthData
+}