public function run()

in src/workflow/ArcanistInstallCertificateWorkflow.php [50:200]
131 lines of code
16 McCabe index (conditional complexity)

  public function run() {
    $console = PhutilConsole::getConsole();

    $uri = $this->determineConduitURI();
    $this->setConduitURI($uri);
    $configuration_manager = $this->getConfigurationManager();

    $config = $configuration_manager->readUserConfigurationFile();

    $this->writeInfo(
      pht('CONNECT'),
      pht(
        'Connecting to "%s"...',
        $uri));

    $conduit = $this->establishConduit()->getConduit();
    try {
      $conduit->callMethodSynchronous('conduit.ping', array());
    } catch (Exception $ex) {
      throw new ArcanistUsageException(
        pht(
          'Failed to connect to server (%s): %s',
          $uri,
          $ex->getMessage()));
    }

    $token_uri = new PhutilURI($uri);
    $token_uri->setPath('/conduit/token/');

    // Check if this server supports the more modern token-based login.
    $is_token_auth = false;
    try {
      $capabilities = $conduit->callMethodSynchronous(
        'conduit.getcapabilities',
        array());
      $auth = idx($capabilities, 'authentication', array());
      if (in_array('token', $auth)) {
        $token_uri->setPath('/conduit/login/');
        $is_token_auth = true;
      }
    } catch (Exception $ex) {
      // Ignore.
    }

    echo phutil_console_format("**%s**\n", pht('LOGIN TO PHABRICATOR'));
    echo phutil_console_format(
      "%s\n\n%s\n\n%s",
      pht(
        'Open this page in your browser and login to '.
        'Phabricator if necessary:'),
      $token_uri,
      pht('Then paste the API Token on that page below.'));

    do {
      $token = phutil_console_prompt(pht('Paste API Token from that page:'));
      $token = trim($token);
      if (strlen($token)) {
        break;
      }
    } while (true);

    if ($is_token_auth) {
      if (strlen($token) != 32) {
        throw new ArcanistUsageException(
          pht(
            'The token "%s" is not formatted correctly. API tokens should '.
            'be 32 characters long. Make sure you visited the correct URI '.
            'and copy/pasted the token correctly.',
            $token));
      }

      if (strncmp($token, 'api-', 4) == 0) {
        echo pht(
          'You are installing a standard API token, but a CLI API token '.
          'was expected. If you\'re writing a script, consider passing the '.
          'token at runtime with --conduit-token instead of installing it.');
        if (!phutil_console_confirm(pht('Install this token anyway?'))) {
          throw new ArcanistUsageException(pht('Not installing API token.'));
        }
      } else if (strncmp($token, 'cli-', 4) !== 0) {
        throw new ArcanistUsageException(
          pht(
            'The token "%s" is not formatted correctly. Valid API tokens '.
            'should begin "cli-" and be 32 characters long. Make sure you '.
            'visited the correct URI and copy/pasted the token correctly.',
            $token));
      }

      $conduit->setConduitToken($token);
      try {
        // UBER CODE
        $usso = new UberUSSO();
        $usso->enhanceConduitClient($conduit);
        try {
          $conduit->callMethodSynchronous('user.whoami', array());
        } catch (HTTPFutureHTTPResponseStatus $ex) {
          if (!$usso->enhanceConduitClient($conduit, $ex)) {
            // if no enhancements came from error, then fail
            // otherwise continue trying
            throw $ex;
          }
          $conduit->callMethodSynchronous('user.whoami', array());
        }
        // UBER CODE END
      } catch (Exception $ex) {
        throw new ArcanistUsageException(
          pht(
            'The token "%s" is not a valid API Token. The server returned '.
            'this response when trying to use it as a token: %s',
            $token,
            $ex->getMessage()));
      }

      $config['hosts'][$uri] = array(
        'token' => $token,
      );
    } else {
      echo "\n";
      echo pht('Downloading authentication certificate...')."\n";
      $info = $conduit->callMethodSynchronous(
        'conduit.getcertificate',
        array(
          'token' => $token,
          'host'  => $uri,
        ));

      $user = $info['username'];
      echo pht("Installing certificate for '%s'...", $user)."\n";
      $config['hosts'][$uri] = array(
        'user' => $user,
        'cert' => $info['certificate'],
      );
    }

    echo pht('Writing %s...', '~/.arcrc')."\n";
    $configuration_manager->writeUserConfigurationFile($config);

    if ($is_token_auth) {
      echo phutil_console_format(
        "<bg:green>** %s **</bg> %s\n",
        pht('SUCCESS!'),
        pht('API Token installed.'));
    } else {
      echo phutil_console_format(
        "<bg:green>** %s **</bg> %s\n",
        pht('SUCCESS!'),
        pht('Certificate installed.'));
    }

    return 0;
  }