cf51c18ad8
Replace the `VAGRANT_ALLOW_PARAM_AUTH_TOKEN` environment variable
with `VAGRANT_SERVER_ACCESS_TOKEN_BY_URL` and update the behavior
when the environment variable is set to add the access token as
a query parameter and disable the addition of the authentication
header.
Fixes #12080
65 lines
2.3 KiB
Ruby
65 lines
2.3 KiB
Ruby
require "cgi"
|
|
require "uri"
|
|
|
|
require "vagrant/util/credential_scrubber"
|
|
require_relative "./add_authentication"
|
|
|
|
require Vagrant.source_root.join("plugins/commands/cloud/client/client")
|
|
|
|
# Similar to AddAuthentication this middleware will add authentication for interacting
|
|
# with Vagrant cloud. It does this by adding Authentication headers to a
|
|
# Vagrant::Util::Downloader object.
|
|
module VagrantPlugins
|
|
module CloudCommand
|
|
class AddDownloaderAuthentication < AddAuthentication
|
|
|
|
def initialize(app, env)
|
|
super
|
|
@logger = Log4r::Logger.new("vagrant::cloud::auth::add-download-authentication")
|
|
end
|
|
|
|
def call(env)
|
|
if ENV["VAGRANT_SERVER_ACCESS_TOKEN_BY_URL"]
|
|
@logger.warn("Authentication header not added due to user requested access token URL parameter")
|
|
else
|
|
client = Client.new(env[:env])
|
|
token = client.token
|
|
Vagrant::Util::CredentialScrubber.sensitive(token)
|
|
|
|
begin
|
|
target_url = URI.parse(env[:downloader].source)
|
|
if target_url.host != TARGET_HOST && REPLACEMENT_HOSTS.include?(target_url.host)
|
|
target_url.host = TARGET_HOST
|
|
env[:downloader].source = target_url.to_s
|
|
end
|
|
rescue URI::Error
|
|
# if there is an error, use current target_url
|
|
end
|
|
|
|
server_uri = URI.parse(Vagrant.server_url.to_s)
|
|
if token && !server_uri.host.to_s.empty?
|
|
if target_url.host == server_uri.host
|
|
if server_uri.host != TARGET_HOST && !self.class.custom_host_notified?
|
|
env[:ui].warn(I18n.t("cloud_command.middleware.authentication.different_target",
|
|
custom_host: server_uri.host, known_host: TARGET_HOST) + "\n")
|
|
sleep CUSTOM_HOST_NOTIFY_WAIT
|
|
self.class.custom_host_notified!
|
|
end
|
|
|
|
if Array(env[:downloader].headers).any? { |h| h.include?("Authorization") }
|
|
@logger.info("Not adding an authentication header, one already found")
|
|
else
|
|
env[:downloader].headers << "Authorization: Bearer #{token}"
|
|
end
|
|
end
|
|
|
|
env[:downloader]
|
|
end
|
|
end
|
|
|
|
@app.call(env)
|
|
end.freeze
|
|
end
|
|
end
|
|
end
|