95 lines
1.9 KiB
Go
95 lines
1.9 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
"crypto/rand"
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"fmt"
|
|
"io"
|
|
"net/http"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/jmorganca/ollama/api"
|
|
"github.com/jmorganca/ollama/auth"
|
|
)
|
|
|
|
type registryChallenge struct {
|
|
Realm string
|
|
Service string
|
|
Scope string
|
|
}
|
|
|
|
func (r registryChallenge) URL() (*url.URL, error) {
|
|
redirectURL, err := url.Parse(r.Realm)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
values := redirectURL.Query()
|
|
values.Add("service", r.Service)
|
|
for _, s := range strings.Split(r.Scope, " ") {
|
|
values.Add("scope", s)
|
|
}
|
|
|
|
values.Add("ts", strconv.FormatInt(time.Now().Unix(), 10))
|
|
|
|
nonce, err := auth.NewNonce(rand.Reader, 16)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
values.Add("nonce", nonce)
|
|
|
|
redirectURL.RawQuery = values.Encode()
|
|
return redirectURL, nil
|
|
}
|
|
|
|
func getAuthorizationToken(ctx context.Context, challenge registryChallenge) (string, error) {
|
|
redirectURL, err := challenge.URL()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
sha256sum := sha256.Sum256(nil)
|
|
data := []byte(fmt.Sprintf("%s,%s,%s", http.MethodGet, redirectURL.String(), base64.StdEncoding.EncodeToString([]byte(hex.EncodeToString(sha256sum[:])))))
|
|
|
|
headers := make(http.Header)
|
|
signature, err := auth.Sign(ctx, data)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
headers.Add("Authorization", signature)
|
|
|
|
response, err := makeRequest(ctx, http.MethodGet, redirectURL, headers, nil, nil)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
defer response.Body.Close()
|
|
|
|
body, err := io.ReadAll(response.Body)
|
|
if err != nil {
|
|
return "", fmt.Errorf("%d: %v", response.StatusCode, err)
|
|
}
|
|
|
|
if response.StatusCode >= http.StatusBadRequest {
|
|
if len(body) > 0 {
|
|
return "", fmt.Errorf("%d: %s", response.StatusCode, body)
|
|
} else {
|
|
return "", fmt.Errorf("%d", response.StatusCode)
|
|
}
|
|
}
|
|
|
|
var token api.TokenResponse
|
|
if err := json.Unmarshal(body, &token); err != nil {
|
|
return "", err
|
|
}
|
|
|
|
return token.Token, nil
|
|
}
|