From ef0a92b491014f12243cc47c741cc599c0c04330 Mon Sep 17 00:00:00 2001
From: "Sascha L. Teichmann" <sascha.teichmann@intevation.de>
Date: Tue, 16 Nov 2021 14:43:35 +0100
Subject: [PATCH] Added a no_passphrase flag to hide the passphrase input field
 from the web interface.

---
 cmd/csaf_provider/config.go       | 1 +
 cmd/csaf_provider/controller.go   | 2 +-
 cmd/csaf_provider/tmpl/index.html | 2 ++
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/cmd/csaf_provider/config.go b/cmd/csaf_provider/config.go
index c048721..88082dd 100644
--- a/cmd/csaf_provider/config.go
+++ b/cmd/csaf_provider/config.go
@@ -23,6 +23,7 @@ type config struct {
 	UploadSignature bool   `toml:"upload_signature"`
 	PGPURL          string `toml:"pgp_url"`
 	Domain          string `toml:"domain"`
+	NoPassphrase    bool   `toml:"no_passphrase"`
 }
 
 type tlp string
diff --git a/cmd/csaf_provider/controller.go b/cmd/csaf_provider/controller.go
index 58e4864..a0ca349 100644
--- a/cmd/csaf_provider/controller.go
+++ b/cmd/csaf_provider/controller.go
@@ -179,7 +179,7 @@ func (c *controller) handleSignature(r *http.Request, data []byte) (string, stri
 
 	// Sign ourself
 
-	if passwd := r.FormValue("passphrase"); passwd != "" {
+	if passwd := r.FormValue("passphrase"); !c.cfg.NoPassphrase && passwd != "" {
 		if key, err = key.Unlock([]byte(passwd)); err != nil {
 			return "", "", err
 		}
diff --git a/cmd/csaf_provider/tmpl/index.html b/cmd/csaf_provider/tmpl/index.html
index c4d7add..de980d0 100644
--- a/cmd/csaf_provider/tmpl/index.html
+++ b/cmd/csaf_provider/tmpl/index.html
@@ -30,9 +30,11 @@
         <textarea name="signature" id="signature" required="required" cols="65" rows="20"
           placeholder="Insert ASCII armored signature here ..."></textarea>
         {{ else }}
+        {{ if not .Config.NoPassphrase }}
         <label for="passphrase">Key passphrase:</label>
         <input name="passphrase" type="password" id="passphrase">
         {{ end }}
+        {{ end }}
         <br>
         <input type="submit" value="Upload">
       </fieldset>