app/controllers/concerns/kas_cookie.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

# frozen_string_literal: true

module KasCookie
  extend ActiveSupport::Concern

  included do
    content_security_policy_with_context do |p|
      next unless ::Gitlab::Kas::UserAccess.enabled?

      kas_url = ::Gitlab::Kas.tunnel_url
      next if URI(kas_url).host == ::Gitlab.config.gitlab.host # already allowed, no need for exception

      kas_url += '/' unless kas_url.end_with?('/')
      p.connect_src(*Array.wrap(p.directives['connect-src']), kas_url)
    end
  end

  def set_kas_cookie
    return unless ::Gitlab::Kas::UserAccess.enabled?

    public_session_id = Gitlab::Session.current&.id&.public_id
    return unless public_session_id

    cookie_data = ::Gitlab::Kas::UserAccess.cookie_data(public_session_id)

    cookies[::Gitlab::Kas::COOKIE_KEY] = cookie_data
  end
end