Method LfsUpload

component/git_http.go:297–403

(ctx context.Context, body io.ReadCloser, req types.UploadRequest)

}

func (c *GitHTTPComponent) LfsUpload(ctx context.Context, body io.ReadCloser, req types.UploadRequest) error {
	var exists bool
	repo, err := c.repo.FindByPath(ctx, req.RepoType, req.Namespace, req.Name)
	if err != nil {
		return fmt.Errorf("failed to find repo, error: %w", err)
	}

	pointer := types.Pointer{Oid: req.Oid, Size: req.Size}

	if !pointer.Valid() {
		slog.Error("invalid lfs oid", slog.String("oid", req.Oid))
		return errors.New("invalid lfs oid")
	}

	objectKey := path.Join("lfs", pointer.RelativePath())
	_, err = c.s3Client.StatObject(ctx, c.config.S3.Bucket, objectKey, minio.StatObjectOptions{})
	if err != nil {
		if os.IsNotExist(err) {
			exists = false
		}
		slog.Error("failed to check if lfs file exists", slog.String("oid", objectKey), slog.Any("error", err))
		exists = false
	} else {
		exists = true
	}
	uploadOrVerify := func() error {
		if exists {
			allowed, err := c.AllowWriteAccess(ctx, req.RepoType, req.Namespace, req.Name, req.CurrentUser)
			if err != nil {
				slog.Error("Unable to check if LFS MetaObject [%s] is allowed. Error: %v", pointer.Oid, err)
				return err
			}
			if !allowed {
				// The file exists but the user has no access to it.
				// The upload gets verified by hashing and size comparison to prove access to it.
				hash := sha256.New()
				written, err := io.Copy(hash, body)
				if err != nil {
					slog.Error("Error creating hash. Error: %v", err)
					return err
				}

				if written != pointer.Size {
					return types.ErrSizeMismatch
				}
				if hex.EncodeToString(hash.Sum(nil)) != pointer.Oid {
					return types.ErrHashMismatch
				}
			}
		} else {
			var (
				uploadErr  error
				uploadInfo minio.UploadInfo
			)
			uploadInfo, uploadErr = c.s3Client.PutObject(
				ctx,
				c.config.S3.Bucket,
				objectKey,