# File lib/heroku/auth.rb, line 14 def api @api ||= begin require("heroku-api") api = Heroku::API.new(default_params.merge(:api_key => password)) def api.request(params, &block) response = super if response.headers.has_key?('X-Heroku-Warning') Heroku::Command.warnings.concat(response.headers['X-Heroku-Warning'].split("\n")) end response end api end end
# File lib/heroku/auth.rb, line 77 def api_key(user = get_credentials[0], password = get_credentials[1]) require("heroku-api") api = Heroku::API.new(default_params) api.post_login(user, password).body["api_key"] end
# File lib/heroku/auth.rb, line 218 def ask_for_and_save_credentials require("heroku-api") # for the errors begin @credentials = ask_for_credentials write_credentials check rescue Heroku::API::Errors::NotFound, Heroku::API::Errors::Unauthorized => e delete_credentials display "Authentication failed." retry if retry_login? exit 1 rescue Exception => e delete_credentials raise e end check_for_associated_ssh_key unless Heroku::Command.current_command == "keys:add" @credentials end
# File lib/heroku/auth.rb, line 180 def ask_for_credentials puts "Enter your Heroku credentials." print "Email: " user = ask print "Password (typing will be hidden): " password = running_on_windows? ? ask_for_password_on_windows : ask_for_password [user, api_key(user, password)] end
# File lib/heroku/auth.rb, line 210 def ask_for_password echo_off password = ask puts echo_on return password end
# File lib/heroku/auth.rb, line 192 def ask_for_password_on_windows require "Win32API" char = nil password = '' while char = Win32API.new("crtdll", "_getch", [ ], "L").Call do break if char == 10 || char == 13 # received carriage return or newline if char == 127 || char == 8 # backspace and delete password.slice!(-1, 1) else # windows might throw a -1 at us so make sure to handle RangeError (password << char.chr) rescue RangeError end end puts return password end
# File lib/heroku/auth.rb, line 287 def associate_key(key) action("Uploading SSH public key #{key}") do if File.exists?(key) api.post_key(File.read(key)) else error("Could not upload SSH public key: key file '" + key + "' does not exist") end end end
# File lib/heroku/auth.rb, line 243 def associate_or_generate_ssh_key public_keys = Dir.glob("#{home_directory}/.ssh/*.pub").sort case public_keys.length when 0 then display "Could not find an existing public key." display "Would you like to generate one? [Yn] ", false unless ask.strip.downcase == "n" display "Generating new SSH public key." generate_ssh_key("id_rsa") associate_key("#{home_directory}/.ssh/id_rsa.pub") end when 1 then display "Found existing public key: #{public_keys.first}" associate_key(public_keys.first) else display "Found the following SSH public keys:" public_keys.each_with_index do |key, index| display "#{index+1}) #{File.basename(key)}" end display "Which would you like to use with your Heroku account? ", false choice = ask.to_i - 1 chosen = public_keys[choice] if choice == -1 || chosen.nil? error("Invalid choice") end associate_key(chosen) end end
# File lib/heroku/auth.rb, line 307 def base_host(host) URI.parse(full_host(host)).host.split(".")[-2..-1].join(".") end
just a stub; will raise if not authenticated
# File lib/heroku/auth.rb, line 49 def check api.get_user end
# File lib/heroku/auth.rb, line 237 def check_for_associated_ssh_key if api.get_keys.body.empty? associate_or_generate_ssh_key end end
# File lib/heroku/auth.rb, line 31 def client @client ||= begin client = Heroku::Client.new(user, password, host) client.on_warning { |msg| self.display("\n#{msg}\n\n") } client end end
# File lib/heroku/auth.rb, line 53 def default_host "heroku.com" end
# File lib/heroku/auth.rb, line 87 def delete_credentials if File.exists?(legacy_credentials_path) FileUtils.rm_f(legacy_credentials_path) end if netrc netrc.delete("api.#{host}") netrc.delete("code.#{host}") netrc.save end @api, @client, @credentials = nil, nil end
# File lib/heroku/auth.rb, line 168 def echo_off with_tty do system "stty -echo" end end
# File lib/heroku/auth.rb, line 174 def echo_on with_tty do system "stty echo" end end
# File lib/heroku/auth.rb, line 311 def full_host(host) (host =~ /^http/) ? host : "https://api.#{host}" end
# File lib/heroku/auth.rb, line 273 def generate_ssh_key(keyfile) ssh_dir = File.join(home_directory, ".ssh") unless File.exists?(ssh_dir) FileUtils.mkdir_p ssh_dir unless running_on_windows? File.chmod(0700, ssh_dir) end end output = %xssh-keygen -t rsa -N "" -f \"#{home_directory}/.ssh/#{keyfile}\" 2>&1` if ! $?.success? error("Could not generate key: #{output}") end end
# File lib/heroku/auth.rb, line 57 def git_host ENV['HEROKU_GIT_HOST'] || host end
# File lib/heroku/auth.rb, line 61 def host ENV['HEROKU_HOST'] || default_host end
# File lib/heroku/auth.rb, line 99 def legacy_credentials_path if host == default_host "#{home_directory}/.heroku/credentials" else "#{home_directory}/.heroku/credentials.#{CGI.escape(host)}" end end
# File lib/heroku/auth.rb, line 39 def login delete_credentials get_credentials end
# File lib/heroku/auth.rb, line 44 def logout delete_credentials end
# File lib/heroku/auth.rb, line 107 def netrc_path default = Netrc.default_path encrypted = default + ".gpg" if File.exists?(encrypted) encrypted else default end end
# File lib/heroku/auth.rb, line 130 def read_credentials if ENV['HEROKU_API_KEY'] ['', ENV['HEROKU_API_KEY']] else # convert legacy credentials to netrc if File.exists?(legacy_credentials_path) @api, @client = nil @credentials = File.read(legacy_credentials_path).split("\n") write_credentials FileUtils.rm_f(legacy_credentials_path) end # read netrc credentials if they exist if netrc # force migration of long api tokens (80 chars) to short ones (40) # #write_credentials rewrites both api.* and code.* credentials = netrc["api.#{host}"] if credentials && credentials[1].length > 40 @credentials = [ credentials[0], credentials[1][0,40] ] write_credentials end netrc["api.#{host}"] end end end
# File lib/heroku/auth.rb, line 297 def retry_login? @login_attempts ||= 0 @login_attempts += 1 @login_attempts < 3 end
# File lib/heroku/auth.rb, line 303 def verified_hosts %w( heroku.com heroku-shadow.com ) end
# File lib/heroku/auth.rb, line 315 def verify_host?(host) hostname = base_host(host) verified = verified_hosts.include?(hostname) verified = false if ENV["HEROKU_SSL_VERIFY"] == "disable" verified end
# File lib/heroku/auth.rb, line 157 def write_credentials FileUtils.mkdir_p(File.dirname(netrc_path)) FileUtils.touch(netrc_path) unless running_on_windows? FileUtils.chmod(0600, netrc_path) end netrc["api.#{host}"] = self.credentials netrc["code.#{host}"] = self.credentials netrc.save end
# File lib/heroku/auth.rb, line 324 def default_params uri = URI.parse(full_host(host)) { :headers => { 'User-Agent' => Heroku.user_agent }, :host => uri.host, :port => uri.port.to_s, :scheme => uri.scheme, :ssl_verify_peer => verify_host?(host) } end