vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

v2: always send www-authn headers on unauthorized

Browse source 
Fixes #1254.
This commit is contained in:
Jimmy Zelinskie 2016-02-22 12:21:22 -05:00
parent a9c64545fa
commit 54a029e2bd
2 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
test/registry_tests.py
View file

@ -1203,7 +1203,10 @@ class V2RegistryTests(V2RegistryPullMixin, V2RegistryPushMixin, RegistryTestsMix
self.assertTrue(response.headers['Link'].find('n=1&last=2') > 0)
# Try to get tags before a repo exists.
self.conduct('GET', '/v2/devtable/doesnotexist/tags/list', auth='jwt', expected_code=401)
response = self.conduct('GET', '/v2/devtable/doesnotexist/tags/list', auth='jwt', expected_code=401)
# Assert 401s to non-auth endpoints also get the WWW-Authenticate header.
self.assertIn('WWW-Authenticate', response.headers)
def test_one_five_blacklist(self):
self.conduct('GET', '/v2/', expected_code=404, user_agent='Go 1.1 package http')