Method UpdateGithubCredentials

database/sql/github.go:401–485

(ctx context.Context, id uint, param params.UpdateGithubCredentialsParams)

}

func (s *sqlDatabase) UpdateGithubCredentials(ctx context.Context, id uint, param params.UpdateGithubCredentialsParams) (ghCreds params.ForgeCredentials, err error) {
	var rowsAffected int64
	defer func() {
		if err == nil && rowsAffected > 0 {
			s.sendNotify(common.GithubCredentialsEntityType, common.UpdateOperation, ghCreds)
		}
	}()
	var creds GithubCredentials
	err = s.conn.Transaction(func(tx *gorm.DB) error {
		q := tx.Preload("Endpoint")
		if !auth.IsAdmin(ctx) {
			userID, err := getUIDFromContext(ctx)
			if err != nil {
				return fmt.Errorf("error updating github credentials: %w", err)
			}
			q = q.Where("user_id = ?", userID)
		}

		if err := q.Where("id = ?", id).First(&creds).Error; err != nil {
			if errors.Is(err, gorm.ErrRecordNotFound) {
				return fmt.Errorf("github credentials not found: %w", runnerErrors.ErrNotFound)
			}
			return fmt.Errorf("error fetching github credentials: %w", err)
		}

		updates := make(map[string]interface{})

		if param.Name != nil && *param.Name != creds.Name {
			updates["name"] = *param.Name
		}
		if param.Description != nil && *param.Description != creds.Description {
			updates["description"] = *param.Description
		}

		var data []byte
		var err error
		switch creds.AuthType {
		case params.ForgeAuthTypePAT:
			if param.PAT != nil {
				data, err = s.marshalAndSeal(param.PAT)
			}

			if param.App != nil {
				return fmt.Errorf("cannot update app credentials for PAT: %w", runnerErrors.ErrBadRequest)
			}
		case params.ForgeAuthTypeApp:
			if param.App != nil {
				data, err = s.marshalAndSeal(param.App)
			}

			if param.PAT != nil {
				return fmt.Errorf("cannot update PAT credentials for app: %w", runnerErrors.ErrBadRequest)
			}
		default:
			// This should never happen, unless there was a bug in the DB migration code,
			// or the DB was manually modified.
			return fmt.Errorf("invalid auth type: %w", runnerErrors.ErrBadRequest)
		}