From 794484a4ce6d64b534fba7daf8bab334cd92b53f Mon Sep 17 00:00:00 2001
From: harryzcy <harry@harryzheng.com>
Date: Tue, 6 Sep 2022 05:44:15 -0400
Subject: [PATCH] Support 'all' scope

---
 models/auth/token_scope.go      | 20 ++++++++++++++++----
 models/auth/token_scope_test.go |  4 +++-
 2 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/models/auth/token_scope.go b/models/auth/token_scope.go
index cf99c5f9cf..790b10d1e3 100644
--- a/models/auth/token_scope.go
+++ b/models/auth/token_scope.go
@@ -13,6 +13,8 @@ import (
 type AccessTokenScope string
 
 const (
+	AccessTokenScopeAll = "all"
+
 	AccessTokenScopeRepo       = "repo"
 	AccessTokenScopeRepoStatus = "repo:status"
 	AccessTokenScopePublicRepo = "public_repo"
@@ -65,6 +67,12 @@ var AllAccessTokenScopes = []string{
 	AccessTokenScopeAdminGPGKey, AccessTokenScopeWriteGPGKey, AccessTokenScopeReadGPGKey,
 }
 
+// AccessTokenScopeBitmap represents a bitmap of access token scopes.
+type AccessTokenScopeBitmap uint64
+
+// AccessTokenScopeAllBitmap is the bitmap of all access token scopes.
+var AccessTokenScopeAllBitmap AccessTokenScopeBitmap = 1<<uint(len(AllAccessTokenScopes)) - 1
+
 // Parse parses the scope string into a bitmap, thus removing possible duplicates.
 func (s AccessTokenScope) Parse() (AccessTokenScopeBitmap, error) {
 	list := strings.Split(string(s), ",")
@@ -74,6 +82,9 @@ func (s AccessTokenScope) Parse() (AccessTokenScopeBitmap, error) {
 		if v == "" {
 			continue
 		}
+		if v == AccessTokenScopeAll {
+			return AccessTokenScopeAllBitmap, nil
+		}
 
 		idx := sliceIndex(AllAccessTokenScopes, v)
 		if idx < 0 {
@@ -94,9 +105,6 @@ func (s AccessTokenScope) Normalize() (AccessTokenScope, error) {
 	return bitmap.ToScope(), nil
 }
 
-// AccessTokenScopeBitmap represents a bitmap of access token scopes.
-type AccessTokenScopeBitmap uint64
-
 // ToScope returns a normalized scope string without any duplicates.
 func (bitmap AccessTokenScopeBitmap) ToScope() AccessTokenScope {
 	var scopes []string
@@ -144,7 +152,11 @@ func (bitmap AccessTokenScopeBitmap) ToScope() AccessTokenScope {
 		}
 	}
 
-	return AccessTokenScope(strings.Join(scopes, ","))
+	scope := AccessTokenScope(strings.Join(scopes, ","))
+	if scope == "repo,admin:org,admin:public_key,admin:repo_hook,admin:org_hook,notification,user,delete_repo,package,admin:gpg_key" {
+		return AccessTokenScopeAll
+	}
+	return scope
 }
 
 func sliceIndex(slice []string, element string) int {
diff --git a/models/auth/token_scope_test.go b/models/auth/token_scope_test.go
index cd8a26887e..a42347a184 100644
--- a/models/auth/token_scope_test.go
+++ b/models/auth/token_scope_test.go
@@ -33,7 +33,9 @@ func TestAccessTokenScope_Normalize(t *testing.T) {
 		{"package,write:package,delete:package", "package", nil},
 		{"admin:gpg_key", "admin:gpg_key", nil},
 		{"admin:gpg_key,write:gpg_key", "admin:gpg_key", nil},
-		{"admin:gpg_key,write:gpg_key,user", "admin:gpg_key,user", nil},
+		{"admin:gpg_key,write:gpg_key,user", "user,admin:gpg_key", nil},
+		{"all", "all", nil},
+		{"repo,admin:org,admin:public_key,admin:repo_hook,admin:org_hook,notification,user,delete_repo,package,admin:gpg_key", "all", nil},
 	}
 
 	for _, test := range tests {