Skip to content

Enable deploy from url with token - #1928

Open
s-yonkov-yonkov wants to merge 1 commit into
masterfrom
feature/LMCROSSITXSADEPLOY-3391
Open

s-yonkov-yonkov wants to merge 1 commit into
masterfrom
feature/LMCROSSITXSADEPLOY-3391

Conversation

@s-yonkov-yonkov

Copy link
Copy Markdown
Contributor

No description provided.

…ROSSITXSADEPLOY-3391]

Add bearer token support to the deploy-from-URL feature so MTA archives
hosted on GitHub (release assets, raw content) can be fetched using a
GitHub PAT or GITHUB_TOKEN.

Changes:
- UserCredentials: add optional `token` field (additive, backward compatible)
- Introduce RequestAuthenticator strategy (Bearer, Basic, UrlUserInfo, None)
  with explicit precedence: token > basic > url-userinfo > none
- AuthenticatorResolver injected as a @nAmed Spring bean into
  DeployFromUrlRemoteClient (replaces inline if/else ladder)
- Fix pre-existing audit-log leak: logStartUploadFromUrl now receives the
  userinfo-stripped URL instead of the raw decoded URL
- Tests: AuthenticatorResolverTest (9), DeployFromUrlRemoteClientTest (+2),
  FilesApiServiceImplTest (+1 audit-log regression test)

# Conflicts:
#	multiapps-controller-web/src/main/java/org/cloudfoundry/multiapps/controller/web/upload/client/DeployFromUrlRemoteClient.java
#	multiapps-controller-web/src/test/java/org/cloudfoundry/multiapps/controller/web/upload/client/DeployFromUrlRemoteClientTest.java
@s-yonkov-yonkov
s-yonkov-yonkov force-pushed the feature/LMCROSSITXSADEPLOY-3391 branch from a26345c to e0c63ee Compare October 16, 2026 13:36

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant