mirror of
https://github.com/go-task/task.git
synced 2026-09-01 19:50:16 +02:00
8a93190060
Authenticating a remote Taskfile so far meant putting the credential in the
include URL, where it leaks into error messages and the confirmation prompt.
`remote.auth` configures free-form headers per host instead, so the URL stays
safe to commit. Values may reference environment variables with ${VAR}.
The headers are injected by a RoundTripper rather than set on the request:
that covers the HEAD probe RemoteExists issues before the GET, and keeps a
cross-host redirect from carrying the credentials. They are resolved when the
request is about to be made, so a cached or offline run does not require a
token it will never send.
87 lines
1.7 KiB
Go
87 lines
1.7 KiB
Go
package taskfile
|
|
|
|
type (
|
|
NodeOption func(*baseNode)
|
|
// baseNode is a generic node that implements the Parent() methods of the
|
|
// NodeReader interface. It does not implement the Read() method and it
|
|
// designed to be embedded in other node types so that this boilerplate code
|
|
// does not need to be repeated.
|
|
baseNode struct {
|
|
parent Node
|
|
dir string
|
|
checksum string
|
|
caCert string
|
|
cert string
|
|
certKey string
|
|
authHeaders HostHeaders
|
|
}
|
|
)
|
|
|
|
func NewBaseNode(dir string, opts ...NodeOption) *baseNode {
|
|
node := &baseNode{
|
|
parent: nil,
|
|
dir: dir,
|
|
}
|
|
|
|
// Apply options
|
|
for _, opt := range opts {
|
|
opt(node)
|
|
}
|
|
|
|
return node
|
|
}
|
|
|
|
func WithParent(parent Node) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.parent = parent
|
|
}
|
|
}
|
|
|
|
func WithChecksum(checksum string) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.checksum = checksum
|
|
}
|
|
}
|
|
|
|
func (node *baseNode) Parent() Node {
|
|
return node.parent
|
|
}
|
|
|
|
func (node *baseNode) Dir() string {
|
|
return node.dir
|
|
}
|
|
|
|
func (node *baseNode) Checksum() string {
|
|
return node.checksum
|
|
}
|
|
|
|
func (node *baseNode) Verify(checksum string) bool {
|
|
return node.checksum == "" || node.checksum == checksum
|
|
}
|
|
|
|
func WithCACert(caCert string) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.caCert = caCert
|
|
}
|
|
}
|
|
|
|
func WithCert(cert string) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.cert = cert
|
|
}
|
|
}
|
|
|
|
func WithCertKey(certKey string) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.certKey = certKey
|
|
}
|
|
}
|
|
|
|
// WithAuthHeaders sets the HTTP headers to send when the node's host matches
|
|
// one of the configured ones.
|
|
func WithAuthHeaders(authHeaders HostHeaders) NodeOption {
|
|
return func(node *baseNode) {
|
|
node.authHeaders = authHeaders
|
|
}
|
|
}
|