feat(api): add Gitea App endpoints for sources and applications

Add GET /gitea-apps, POST /applications/private-gitea-app, and gitea_app_uuid in PATCH /applications/{uuid}, with OpenAPI docs and MCP tool support. Closes #12459 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-06 21:18:11 -04:00 · 2026-11-05 11:27:24 +01:00
parent 4bdf03db69
commit 3bc82eb71d
11 changed files with 1956 additions and 81 deletions
@@ -0,0 +1,94 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Models\GiteaApp;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Collection;
+use OpenApi\Attributes as OA;
+
+class GiteaController extends Controller
+{
+    private function removeSensitiveData(GiteaApp $giteaApp, int $teamId): Collection
+    {
+        $sensitiveFields = ['client_secret', 'access_token', 'refresh_token', 'webhook_secret'];
+
+        if (request()->attributes->get('can_read_sensitive', false) === true && $giteaApp->team_id === $teamId) {
+            $giteaApp->makeVisible($sensitiveFields);
+        } else {
+            $giteaApp->makeHidden($sensitiveFields);
+        }
+
+        return serializeApiResponse($giteaApp);
+    }
+
+    #[OA\Get(
+        summary: 'List',
+        description: 'List all Gitea apps for the current team (and system-wide sources).',
+        path: '/gitea-apps',
+        operationId: 'list-gitea-apps',
+        security: [
+            ['bearerAuth' => []],
+        ],
+        tags: ['Gitea Apps'],
+        responses: [
+            new OA\Response(
+                response: 200,
+                description: 'List of Gitea apps.',
+                content: [
+                    new OA\MediaType(
+                        mediaType: 'application/json',
+                        schema: new OA\Schema(
+                            type: 'array',
+                            items: new OA\Items(
+                                type: 'object',
+                                properties: [
+                                    'id' => ['type' => 'integer'],
+                                    'uuid' => ['type' => 'string'],
+                                    'name' => ['type' => 'string'],
+                                    'organization' => ['type' => 'string', 'nullable' => true],
+                                    'api_url' => ['type' => 'string'],
+                                    'html_url' => ['type' => 'string'],
+                                    'custom_user' => ['type' => 'string'],
+                                    'custom_port' => ['type' => 'integer'],
+                                    'client_id' => ['type' => 'string', 'nullable' => true],
+                                    'redirect_uri' => ['type' => 'string', 'nullable' => true],
+                                    'is_system_wide' => ['type' => 'boolean'],
+                                    'is_public' => ['type' => 'boolean'],
+                                    'is_connected' => ['type' => 'boolean', 'description' => 'True when the OAuth connection is complete and the source can deploy private repositories.'],
+                                    'team_id' => ['type' => 'integer'],
+                                ]
+                            )
+                        )
+                    ),
+                ]
+            ),
+            new OA\Response(
+                response: 401,
+                ref: '#/components/responses/401',
+            ),
+            new OA\Response(
+                response: 400,
+                ref: '#/components/responses/400',
+            ),
+        ]
+    )]
+    public function list_gitea_apps(Request $request): JsonResponse
+    {
+        $teamId = getTeamIdFromToken();
+        if (is_null($teamId)) {
+            return invalidTokenResponse();
+        }
+
+        $giteaApps = GiteaApp::where(function ($query) use ($teamId) {
+            $query->where('team_id', $teamId)
+                ->orWhere('is_system_wide', true);
+        })->get();
+
+        return response()->json($giteaApps->map(
+            fn (GiteaApp $giteaApp) => $this->removeSensitiveData($giteaApp, $teamId)->put('is_connected', $giteaApp->isConnected())
+        ));
+    }
+}