acbf7ea
use axum::extract::{Path, State};
use export::rest::AppResponseData;
use jwt::Session;
use crate::errors::{ApiError, GitApiError};
use crate::handler::resolve_reader;
use crate::service::GitService;
use crate::service::signatures::VerifyResultDto;
#[derive(Debug, Clone, serde::Deserialize, utoipa::IntoParams)]
pub struct CommitShaPath {
pub space_name: String,
pub repo_name: String,
pub sha: String,
}
#[utoipa::path(
get,
path = "/repos/{space_name}/{repo_name}/signatures/commit/{sha}",
tag = "signatures",
description = "验证提交 GPG 签名并返回签名者、密钥和验证结果。",
params(CommitShaPath),
responses(
(status = 200, description = "verify commit signature", body = AppResponseData<VerifyResultDto>)
)
)]
pub async fn verify_commit(
State(service): State<GitService>,
session: Session,
Path(path): Path<CommitShaPath>,
) -> Result<AppResponseData<VerifyResultDto>, ApiError> {
let _ = resolve_reader(
&service,
&session,
path.space_name.clone(),
path.repo_name.clone(),
)
.await?;
let out = service
.signature_verify_commit(path.space_name, path.repo_name, path.sha)
.await
.map_err(GitApiError::from)?;
Ok(AppResponseData::ok(out))
}