vbatts/quay
Archived
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Have the V2 registry endpoints raise Unauthorized with the proper header when anonymous access is disabled

Browse source 
Before this change, we'd raise a generic 401, which was breaking containerd and cri-o.

Fixes https://jira.coreos.com/browse/QUAY-1332
This commit is contained in:
Joseph Schorr 2019-02-15 15:29:57 -05:00
parent c4f7b28dc6
commit 7690d5d495
4 changed files with 19 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
endpoints/v2/__init__.py
View file

@ -107,6 +107,9 @@ def _require_repo_permission(permission_class, scopes=None, allow_public=False):
raise Unsupported(detail=msg)
if repository_ref.is_public:
if not features.ANONYMOUS_ACCESS:
raise Unauthorized(repository=repository, scopes=scopes)
return func(namespace_name, repo_name, *args, **kwargs)
raise Unauthorized(repository=repository, scopes=scopes)