1 files changed, 32 insertions(+), 0 deletions(-)

M gitsrht/blueprints/repo.py

@@ 187,6 187,27 @@ def lookup_ref(git_repo, ref, path):
         abort(404)
     return commit, ref, "/".join(path)
 
+def lookup_signature(git_repo, ref, fmt=None):
+    commit_or_tag = git_repo.revparse_single(ref)
+    if not isinstance(commit_or_tag, (pygit2.Commit, pygit2.Tag)):
+        return None, None
+
+    fmts = ['tar.gz', 'tar']
+
+    if fmt is not None:
+        if fmt not in fmts:
+            return None, None
+        fmts = [fmt]
+
+    for trial in fmts:
+        try:
+            note = git_repo.lookup_note(commit_or_tag.hex, f'refs/notes/signatures/{trial}')
+        except KeyError:
+            continue
+
+        return note.message, trial
+    return None, None
+
 @repo.route("/<owner>/<repo>/tree", defaults={"ref": None, "path": ""})
 @repo.route("/<owner>/<repo>/tree/<path:ref>", defaults={"path": ""})
 @repo.route("/<owner>/<repo>/tree/<path:ref>/item/<path:path>")


@@ 365,6 386,17 @@ def archive(owner, repo, ref):
         return send_file(subp.stdout, mimetype="application/tar+gzip",
                 as_attachment=True, attachment_filename=f"{repo.name}-{refname}.tar.gz")
 
+@repo.route("/<owner>/<repo>/archive/<path:ref>.<fmt>.asc")
+def archivesig(owner, repo, ref, fmt):
+    owner, repo = get_repo_or_redir(owner, repo)
+    with GitRepository(repo.path) as git_repo:
+        sigdata, _ = lookup_signature(git_repo, ref, fmt)
+        if sigdata is None:
+            abort(404)
+
+        return send_file(BytesIO(sigdata.encode('utf-8')), mimetype="application/pgp-signature",
+                as_attachment=True, attachment_filename=f"{repo.name}-{ref}.{fmt}.asc")
+
 class _AnnotatedRef:
     def __init__(self, repo, ref):
         self.ref = ref