OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	07/20/2024 06:32:22 AM	rwxr-xr-x
📄 AuthHelper.php	1.66 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Bitbucket.php	8.38 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 ComposerMirror.php	1.75 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 ConfigValidator.php	5.45 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 ErrorHandler.php	2.24 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Filesystem.php	21.29 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Git.php	14.3 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 GitHub.php	4.52 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 GitLab.php	5.42 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 IniHelper.php	1.91 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 NoProxyPattern.php	4.07 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Perforce.php	16.72 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Platform.php	2.54 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 ProcessExecutor.php	5.49 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 RemoteFilesystem.php	41.17 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Silencer.php	2.12 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 SpdxLicense.php	570 bytes	01/31/2018 03:28:18 PM	rw-r--r--
📄 StreamContextFactory.php	7.13 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Svn.php	9.31 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 TlsHelper.php	6.51 KB	01/31/2018 03:28:18 PM	rw-r--r--
📄 Url.php	2.86 KB	01/31/2018 03:28:18 PM	rw-r--r--

Editing: GitLab.php

<?php

/*
 * This file is part of Composer.
 *
 * (c) Nils Adermann <naderman@naderman.de>
 *     Jordi Boggiano <j.boggiano@seld.be>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Composer\Util;

use Composer\IO\IOInterface;
use Composer\Config;
use Composer\Factory;
use Composer\Downloader\TransportException;
use Composer\Json\JsonFile;

/**
 * @author Roshan Gautam <roshan.gautam@hotmail.com>
 */
class GitLab
{
    protected $io;
    protected $config;
    protected $process;
    protected $remoteFilesystem;

/**
     * Constructor.
     *
     * @param IOInterface      $io               The IO instance
     * @param Config           $config           The composer configuration
     * @param ProcessExecutor  $process          Process instance, injectable for mocking
     * @param RemoteFilesystem $remoteFilesystem Remote Filesystem, injectable for mocking
     */
    public function __construct(IOInterface $io, Config $config, ProcessExecutor $process = null, RemoteFilesystem $remoteFilesystem = null)
    {
        $this->io = $io;
        $this->config = $config;
        $this->process = $process ?: new ProcessExecutor();
        $this->remoteFilesystem = $remoteFilesystem ?: Factory::createRemoteFilesystem($this->io, $config);
    }

/**
     * Attempts to authorize a GitLab domain via OAuth.
     *
     * @param string $originUrl The host this GitLab instance is located at
     *
     * @return bool true on success
     */
    public function authorizeOAuth($originUrl)
    {
        if (!in_array($originUrl, $this->config->get('gitlab-domains'), true)) {
            return false;
        }

// if available use token from git config
        if (0 === $this->process->execute('git config gitlab.accesstoken', $output)) {
            $this->io->setAuthentication($originUrl, trim($output), 'oauth2');

return true;
        }

// if available use token from composer config
        $authTokens = $this->config->get('gitlab-token');

if (isset($authTokens[$originUrl])) {
            $this->io->setAuthentication($originUrl, $authTokens[$originUrl], 'private-token');

return true;
        }

return false;
    }

/**
     * Authorizes a GitLab domain interactively via OAuth.
     *
     * @param string $scheme    Scheme used in the origin URL
     * @param string $originUrl The host this GitLab instance is located at
     * @param string $message   The reason this authorization is required
     *
     * @throws \RuntimeException
     * @throws TransportException|\Exception
     *
     * @return bool true on success
     */
    public function authorizeOAuthInteractively($scheme, $originUrl, $message = null)
    {
        if ($message) {
            $this->io->writeError($message);
        }

$this->io->writeError(sprintf('A token will be created and stored in "%s", your password will never be stored', $this->config->getAuthConfigSource()->getName()));
        $this->io->writeError('To revoke access to this token you can visit '.$originUrl.'/profile/applications');

$attemptCounter = 0;

while ($attemptCounter++ < 5) {
            try {
                $response = $this->createToken($scheme, $originUrl);
            } catch (TransportException $e) {
                // 401 is bad credentials,
                // 403 is max login attempts exceeded
                if (in_array($e->getCode(), array(403, 401))) {
                    if (401 === $e->getCode()) {
                        $this->io->writeError('Bad credentials.');
                    } else {
                        $this->io->writeError('Maximum number of login attempts exceeded. Please try again later.');
                    }

$this->io->writeError('You can also manually create a personal token at '.$scheme.'://'.$originUrl.'/profile/personal_access_tokens');
                    $this->io->writeError('Add it using "composer config --global --auth gitlab-token.'.$originUrl.' <token>"');

continue;
                }

throw $e;
            }

$this->io->setAuthentication($originUrl, $response['access_token'], 'oauth2');

// store value in user config in auth file
            $this->config->getAuthConfigSource()->addConfigSetting('gitlab-oauth.'.$originUrl, $response['access_token']);

return true;
        }

throw new \RuntimeException('Invalid GitLab credentials 5 times in a row, aborting.');
    }

private function createToken($scheme, $originUrl)
    {
        $username = $this->io->ask('Username: ');
        $password = $this->io->askAndHideAnswer('Password: ');

$headers = array('Content-Type: application/x-www-form-urlencoded');

$apiUrl = $originUrl;
        $data = http_build_query(array(
            'username' => $username,
            'password' => $password,
            'grant_type' => 'password',
        ), null, '&');
        $options = array(
            'retry-auth-failure' => false,
            'http' => array(
                'method' => 'POST',
                'header' => $headers,
                'content' => $data,
            ),
        );

$json = $this->remoteFilesystem->getContents($originUrl, $scheme.'://'.$apiUrl.'/oauth/token', false, $options);

$this->io->writeError('Token successfully created');

return JsonFile::parseJson($json);
    }
}