// Copyright (C) 2009 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gerrit.httpd;

import com.google.gerrit.server.config.AuthConfig;
import com.google.inject.Inject;
import com.google.inject.servlet.ServletModule;

import javax.servlet.Filter;

/** Configures Git access over HTTP with authentication. */
public class GitOverHttpModule extends ServletModule {
  private final AuthConfig authConfig;

  @Inject
  GitOverHttpModule(AuthConfig authConfig) {
    this.authConfig = authConfig;
  }

  @Override
  protected void configureServlets() {
    Class<? extends Filter> authFilter;
    if (authConfig.isTrustContainerAuth()) {
      authFilter = ContainerAuthFilter.class;
    } else if (authConfig.isGitBasicAuth()) {
      authFilter = ProjectBasicAuthFilter.class;
    } else {
      authFilter = ProjectDigestFilter.class;
    }

    String git = GitOverHttpServlet.URL_REGEX;
    filterRegex(git).through(authFilter);
    serveRegex(git).with(GitOverHttpServlet.class);

    filter("/a/*").through(authFilter);
  }
}

@@ -665,26 +665,164 @@
 rit.
-server.config.Auth
+reviewdb.client.AccountGeneralPreferences.DownloadScheme;%0Aimport com.google.gerrit.server.config.AuthConfig;%0Aimport com.google.gerrit.server.config.Download
 Conf
@@ -1090,16 +1090,63 @@
 hConfig;
+%0A  private final DownloadConfig downloadConfig;
 %0A%0A  @Inj
@@ -1194,38 +1194,117 @@
 nfig
-) %7B%0A    this.authConfig = auth
+,%0A      DownloadConfig downloadConfig) %7B%0A    this.authConfig = authConfig;%0A    this.downloadConfig = download
 Conf
@@ -1655,16 +1655,45 @@
 %0A    %7D%0A%0A
+    if (isHttpEnabled()) %7B%0A  
     Stri
@@ -1731,24 +1731,26 @@
 _REGEX;%0A    
+  
 filterRegex(
@@ -1779,16 +1779,18 @@
 r);%0A    
+ 
+ 
 serveReg
@@ -1828,16 +1828,22 @@
 .class);
+%0A    %7D
 %0A%0A    fi
@@ -1879,11 +1879,301 @@
 er);%0A  %7D
+%0A%0A  private boolean isHttpEnabled()%7B%0A    return downloadConfig.getDownloadSchemes().contains(DownloadScheme.DEFAULT_DOWNLOADS)%0A        %7C%7C downloadConfig.getDownloadSchemes().contains(DownloadScheme.ANON_HTTP)%0A        %7C%7C downloadConfig.getDownloadSchemes().contains(DownloadScheme.HTTP);%0A  %7D
 %0A%7D%0A

Disable Git over http when Gerrit is not configured to support http