mmintel/e-tib.com
1
0
Fork 0
Code Issues Pull Requests 2 Actions 150 Packages Projects Releases Wiki Activity

fix: add trailing slash to registry URL in registry-auth.sh
Some checks failed
Build & Deploy / 🔍 Prepare (push) Successful in 41s
Details
Build & Deploy / 🧪 QA (push) Failing after 1m0s
Details
Build & Deploy / 🏗️ Build (push) Has been skipped
Details
Build & Deploy / 🚀 Deploy (push) Has been skipped
Details
Build & Deploy / 🧪 Post-Deploy Verification (push) Has been skipped
Details
Build & Deploy / 🔔 Notify (push) Successful in 1s
Details

Browse Source
This commit is contained in:
Marc Mintel
2026-05-12 11:05:00 +02:00
parent c627f1d724
commit 6466bc4090
1 changed files with 18 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
scripts/registry-auth.sh
View File

@@ -1,35 +1,32 @@
#!/bin/bash #!/bin/bash
set -e
# Robust Registry Authentication Script # Robust Registry Authentication Script
# Following Mintel CI/CD Hardening Standards # Following Mintel CI/CD Hardening Standards
# 1. Discovery # 1. Discovery
TOKENS="${NPM_TOKEN} ${GITEA_PAT} ${MINTEL_PRIVATE_TOKEN}" TOKENS="${NPM_TOKEN} ${GITEA_PAT} ${MINTEL_PRIVATE_TOKEN}"
# Add more potential user aliases
USERS="${GITHUB_REPOSITORY_OWNER} ${GITHUB_ACTOR} marcmintel mintel mmintel"
VALID_TOKEN="" VALID_TOKEN=""
VALID_USER=""
echo "🔍 Starting functional registry discovery..." echo "🔍 Starting functional registry discovery..."
for T in $TOKENS; do for T in $TOKENS; do
[ -z "$T" ] && continue [ -z "$T" ] && continue
for U in $USERS; do
[ -z "$U" ] && continue
T_MASKED="${T:0:4}..." T_START="${T:0:4}"
# Use Gitea API to verify token T_END="${T: -4}"
STATUS=$(curl -s -o /dev/null -w "%{http_code}" -H "Authorization: token $T" "https://git.infra.mintel.me/api/v1/user" || echo "500") echo "Testing token starting with '$T_START...' and ending with '...$T_END'"
if [ "$STATUS" == "200" ]; then # Use Gitea API to verify token
VALID_TOKEN="$T" # We use -k (insecure) if needed, but infra.mintel.me should have valid certs
VALID_USER="$U" STATUS=$(curl -s -o /dev/null -w "%{http_code}" -H "Authorization: token $T" "https://git.infra.mintel.me/api/v1/user" || echo "500")
echo "✅ Token verified via API (User: $U)"
break 2 if [ "$STATUS" == "200" ]; then
fi VALID_TOKEN="$T"
done echo "✅ Token verified via API"
break
else
echo "❌ Token rejected by API (Status: $STATUS)"
fi
done done
# Fallback: If API verification failed, try to use NPM_TOKEN if provided # Fallback: If API verification failed, try to use NPM_TOKEN if provided
@@ -40,14 +37,13 @@ fi
if [ -z "$VALID_TOKEN" ]; then if [ -z "$VALID_TOKEN" ]; then
echo "❌ CRITICAL: No valid registry token found in environment." echo "❌ CRITICAL: No valid registry token found in environment."
echo "Available env vars: NPM_TOKEN=${NPM_TOKEN:0:2}..., GITEA_PAT=${GITEA_PAT:0:2}..., MINTEL_PRIVATE_TOKEN=${MINTEL_PRIVATE_TOKEN:0:2}..."
exit 1 exit 1
fi fi
# 2. Hardened .npmrc Generation # 2. Hardened .npmrc Generation
# We use the pattern from klz-2026 which is known to work # Trailing slashes are CRITICAL for pnpm registry matching
cat << EOF > .npmrc cat << EOF > .npmrc
@mintel:registry=https://git.infra.mintel.me/api/packages/mmintel/npm @mintel:registry=https://git.infra.mintel.me/api/packages/mmintel/npm/
//git.infra.mintel.me/api/packages/mmintel/npm/:_authToken=${VALID_TOKEN} //git.infra.mintel.me/api/packages/mmintel/npm/:_authToken=${VALID_TOKEN}
//git.infra.mintel.me/api/packages/mmintel/npm/:always-auth=true //git.infra.mintel.me/api/packages/mmintel/npm/:always-auth=true
//registry.infra.mintel.me/api/packages/mmintel/npm/:_authToken=${VALID_TOKEN} //registry.infra.mintel.me/api/packages/mmintel/npm/:_authToken=${VALID_TOKEN}