sapcc / keppel / 14338700670

81%

master: 81%

Pull #522

github

api/registry: respond 401 with challenge when anonymous first pull is rejected

The existing behavior breaks `helm pull`, which (as intended by the API spec)
tries to GET a manifest to be presented with a 401 error and
Www-Authenticate challenge if necessary. We did not do this before,
because _technically_ anonymous users could pull manifests _if_ they
were replicated. But then they were not, and we got stuck.

With this, Helm and friends should try to authenticate and then retry
the GET as an authenticated user.

62 of 71 new or added lines in 12 files covered. (87.32%)

7497 of 9269 relevant lines covered (80.88%)

164.64 hits per line