# Copyright (C) 2020-2023 The Software Heritage developers
# See the AUTHORS file at the top-level directory of this distribution
# License: GNU General Public License version 3, or any later version
# See top-level LICENSE file for more information
import logging
import random
import re
import time
from typing import Any, Dict, List, Optional
import requests
from requests.exceptions import ChunkedEncodingError, ConnectionError
from tenacity import (
retry,
retry_any,
retry_if_exception_type,
retry_if_result,
stop_after_attempt,
wait_exponential,
)
from ..statsd import Statsd
GITHUB_PATTERN = re.compile(
r"(//|git://|git@|git//|https?://|ssh://|.*@)github.com[/:](?P<user_repo>.*)"
)
logger = logging.getLogger(__name__)
def _url_github_api(user_repo: str) -> str:
"""Given the user_repo, returns the expected github api url."""
return f"https://api.github.com/repos/{user_repo}"
_SANITIZATION_RE = re.compile(r"^(.*?)/?(\.git)?/?$")
def _sanitize_github_url(url: str) -> str:
"""Sanitize github url."""
m = _SANITIZATION_RE.match(url.lower())
assert m is not None, url # impossible, but mypy doesn't know it
return m.group(1)
[docs]
def get_canonical_github_origin_url(
url: str, credentials: Optional[List[Dict[str, str]]] = None
) -> Optional[str]:
"""Retrieve canonical github url out of an url if any or None otherwise.
This triggers an http request to the github api url to determine the canonical
repository url (if no credentials is provided, the http request is anonymous. Either
way that request can be rate-limited by github.)
"""
return GitHubSession(
user_agent="SWH core library", credentials=credentials
).get_canonical_url(url)
[docs]
class RateLimited(Exception):
def __init__(self, response):
self.reset_time: Optional[int]
# Figure out how long we need to sleep because of that rate limit
ratelimit_reset = response.headers.get("X-Ratelimit-Reset")
retry_after = response.headers.get("Retry-After")
if ratelimit_reset is not None:
self.reset_time = int(ratelimit_reset)
elif retry_after is not None:
self.reset_time = int(time.time()) + int(retry_after) + 1
else:
logger.warning(
"Received a rate-limit-like status code %s, but no rate-limit "
"headers set. Response content: %s",
response.status_code,
response.content,
)
self.reset_time = None
self.response = response
[docs]
class MissingRateLimitReset(Exception):
pass
[docs]
class GitHubSession:
"""Manages a :class:`requests.Session` with (optionally) multiple credentials,
and cycles through them when reaching rate-limits."""
credentials: Optional[List[Dict[str, str]]] = None
def __init__(
self, user_agent: str, credentials: Optional[List[Dict[str, str]]] = None
) -> None:
"""Initialize a requests session with the proper headers for requests to
GitHub."""
if credentials:
creds = credentials.copy()
random.shuffle(creds)
self.credentials = creds
self.statsd = Statsd(
namespace="swh_outbound_api",
constant_tags={"api_type": "github", "api_instance": "github"},
)
self.session = requests.Session()
self.session.headers.update(
{"Accept": "application/vnd.github.v3+json", "User-Agent": user_agent}
)
self.anonymous = not self.credentials
if self.anonymous:
logger.warning("No tokens set in configuration, using anonymous mode")
self.token_index = -1
self.current_user: Optional[str] = None
if not self.anonymous:
# Initialize the first token value in the session headers
self.set_next_session_token()
[docs]
def set_next_session_token(self) -> None:
"""Update the current authentication token with the next one in line."""
assert self.credentials
self.token_index = (self.token_index + 1) % len(self.credentials)
auth = self.credentials[self.token_index]
self.current_user = auth["username"]
logger.debug("Using authentication token for user %s", self.current_user)
if "password" in auth:
token = auth["password"]
else:
token = auth["token"]
self.session.headers.update({"Authorization": f"token {token}"})
@retry(
wait=wait_exponential(multiplier=1, min=4, max=10),
stop=stop_after_attempt(5),
retry=retry_any(
# ChunkedEncodingError happens when the TLS connection gets reset, e.g. when
# running the lister on a connection with high latency.
retry_if_exception_type(ChunkedEncodingError),
# ConnectionError happen when the server hangs up
retry_if_exception_type(ConnectionError),
# 502 status codes happen for a Server Error, sometimes
retry_if_result(lambda r: r.status_code == 502),
),
)
def _request(self, url: str) -> requests.Response:
# When anonymous, rate-limits are per-IP; but we cannot necessarily
# get the IP/hostname here as we may be containerized. Instead, we rely on
# statsd-exporter adding the hostname in the 'instance' tag.
tags = {"username": self.current_user or "anonymous"}
self.statsd.increment("requests_total", tags=tags)
response = self.session.get(url)
# self.session.get(url) raises in case of non-HTTP error (DNS, TCP, TLS, ...),
# so responses_total may differ from requests_total.
self.statsd.increment(
"responses_total", tags={**tags, "http_status": response.status_code}
)
try:
ratelimit_remaining = int(response.headers["x-ratelimit-remaining"])
except (KeyError, ValueError):
logger.warning(
"Invalid x-ratelimit-remaining header from GitHub: %r",
response.headers.get("x-ratelimit-remaining"),
)
else:
self.statsd.gauge("remaining_requests", ratelimit_remaining, tags=tags)
try:
reset_seconds = int(response.headers["x-ratelimit-reset"]) - time.time()
except (KeyError, ValueError):
logger.warning(
"Invalid x-ratelimit-reset header from GitHub: %r",
response.headers.get("x-ratelimit-reset"),
)
else:
self.statsd.gauge("reset_seconds", reset_seconds, tags=tags)
if (
# 429 status code was previously returned for authenticated users, keep the
# check for backward compatibility
response.status_code == 429
or (
# https://docs.github.com/en/rest/overview
# /resources-in-the-rest-api?apiVersion=2022-11-28#exceeding-the-rate-limit
response.status_code == 403
and response.json()
.get("message", "")
.startswith("API rate limit exceeded")
)
):
self.statsd.increment("rate_limited_responses_total", tags=tags)
raise RateLimited(response)
return response
[docs]
def request(self, url) -> requests.Response:
"""Repeatedly requests the given URL, cycling through credentials and sleeping
if necessary; until either a successful response or :exc:`MissingRateLimitReset`
"""
# The following for/else loop handles rate limiting; if successful,
# it provides the rest of the function with a `response` object.
#
# If all tokens are rate-limited, we sleep until the reset time,
# then `continue` into another iteration of the outer while loop,
# attempting to get data from the same URL again.
while True:
max_attempts = len(self.credentials) if self.credentials else 1
reset_times: Dict[int, int] = {} # token index -> time
for attempt in range(max_attempts):
try:
return self._request(url)
except RateLimited as e:
reset_info = "(unknown reset)"
if e.reset_time is not None:
reset_times[self.token_index] = e.reset_time
reset_info = "(resetting in %ss)" % (e.reset_time - time.time())
if not self.anonymous:
logger.info(
"Rate limit exhausted for current user %s %s",
self.current_user,
reset_info,
)
# Use next token in line
self.set_next_session_token()
# Wait one second to avoid triggering GitHub's abuse rate limits
self.statsd.increment("sleep_seconds_total", 1)
time.sleep(1)
# All tokens have been rate-limited. What do we do?
if not reset_times:
logger.warning(
"No X-Ratelimit-Reset value found in responses for any token; "
"Giving up."
)
raise MissingRateLimitReset()
sleep_time = max(reset_times.values()) - time.time() + 1
logger.info(
"Rate limits exhausted for all tokens. Sleeping for %f seconds.",
sleep_time,
)
self.statsd.increment("sleep_seconds_total", sleep_time)
time.sleep(sleep_time)
[docs]
def get_canonical_url(self, repo_url: str) -> Optional[str]:
"""Retrieve canonical github url out of a github url.
This triggers an http request to the github api url to determine the
canonical repository url.
Args:
repo_url: URL of a github repository
Returns:
The canonical github url, the input url if it is not a github one,
None otherwise.
"""
try:
metadata = self.get_repository_metadata(repo_url)
return metadata.get("html_url") if metadata else repo_url
except requests.HTTPError:
# invalid github repository
return None
