1 files changed, 0 insertions, 111 deletions
diff --git a/app/services/resources/create_access_token_service.rb b/app/services/resources/create_access_token_service.rb
deleted file mode 100644
index fd3c8d78e58..00000000000
--- a/app/services/resources/create_access_token_service.rb
+++ /dev/null
@@ -1,111 +0,0 @@
-# frozen_string_literal: true
-
-module Resources
-  class CreateAccessTokenService < BaseService
-    attr_accessor :resource_type, :resource
-
-    def initialize(resource_type, resource, user, params = {})
-      @resource_type =  resource_type
-      @resource = resource
-      @current_user = user
-      @params = params.dup
-    end
-
-    def execute
-      return unless feature_enabled?
-      return error("User does not have permission to create #{resource_type} Access Token") unless has_permission_to_create?
-
-      # We skip authorization by default, since the user creating the bot is not an admin
-      # and project/group bot users are not created via sign-up
-      user = create_user
-
-      return error(user.errors.full_messages.to_sentence) unless user.persisted?
-      return error("Failed to provide maintainer access") unless provision_access(resource, user)
-
-      token_response = create_personal_access_token(user)
-
-      if token_response.success?
-        success(token_response.payload[:personal_access_token])
-      else
-        error(token_response.message)
-      end
-    end
-
-    private
-
-    def feature_enabled?
-      ::Feature.enabled?(:resource_access_token, resource)
-    end
-
-    def has_permission_to_create?
-      case resource_type
-      when 'project'
-        can?(current_user, :admin_project, resource)
-      when 'group'
-        can?(current_user, :admin_group, resource)
-      else
-        false
-      end
-    end
-
-    def create_user
-      Users::CreateService.new(current_user, default_user_params).execute(skip_authorization: true)
-    end
-
-    def default_user_params
-      {
-        name: params[:name] || "#{resource.name.to_s.humanize} bot",
-        email: generate_email,
-        username: generate_username,
-        user_type: "#{resource_type}_bot".to_sym
-      }
-    end
-
-    def generate_username
-      base_username = "#{resource_type}_#{resource.id}_bot"
-
-      uniquify.string(base_username) { |s| User.find_by_username(s) }
-    end
-
-    def generate_email
-      email_pattern = "#{resource_type}#{resource.id}_bot%s@example.com"
-
-      uniquify.string(-> (n) { Kernel.sprintf(email_pattern, n) }) do |s|
-        User.find_by_email(s)
-      end
-    end
-
-    def uniquify
-      Uniquify.new
-    end
-
-    def create_personal_access_token(user)
-      PersonalAccessTokens::CreateService.new(user, personal_access_token_params).execute
-    end
-
-    def personal_access_token_params
-      {
-        name: "#{resource_type}_bot",
-        impersonation: false,
-        scopes: params[:scopes] || default_scopes,
-        expires_at: params[:expires_at] || nil
-      }
-    end
-
-    def default_scopes
-      Gitlab::Auth::API_SCOPES + Gitlab::Auth::REPOSITORY_SCOPES + Gitlab::Auth.registry_scopes - [:read_user]
-    end
-
-    def provision_access(resource, user)
-      resource.add_maintainer(user)
-    end
-
-    def error(message)
-      ServiceResponse.error(message: message)
-    end
-
-    def success(access_token)
-      ServiceResponse.success(payload: { access_token: access_token })
-    end
-  end
-end