Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop deprecated auth helpers from Connection and refactor auth middleware #1308

Merged
merged 1 commit into from
Aug 15, 2021

Conversation

iMacTia
Copy link
Member

@iMacTia iMacTia commented Aug 14, 2021

Description

  • Drop deprecated auth helpers from Connection
  • Merge Authentication middleware.
  • Add possibility of passing a proc.
  • Update documentation.

Fixes #1302 as this is the last deprecation in the 1.x code 🙌

Todos

List any remaining work that needs to be done, i.e:

  • Tests
  • Documentation

Merge Authentication middleware.
Add possibility of passing a proc.
Update documentation.
@iMacTia iMacTia self-assigned this Aug 14, 2021
Copy link
Member

@olleolleolle olleolleolle left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good removal! 🥳

This brings clarity to a place where the story was not so straight-forward to tell before!

@@ -14,18 +14,18 @@

shared_examples 'does not interfere with existing authentication' do
context 'and request already has an authentication header' do
let(:response) { conn.get('/auth-echo', nil, authorization: 'Token token="bar"') }
let(:response) { conn.get('/auth-echo', nil, authorization: 'OAuth oauth_token') }
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice improvement!

@etiennebarrie
Copy link

etiennebarrie commented Aug 31, 2021

This broke passing a URL with embedded basic auth in the user info part of the URI, because basic_auth is still used in url_prefix=

with_uri_credentials(uri) do |user, password|
basic_auth user, password
uri.user = uri.password = nil
end

~/src/github.com/lostisland/faraday (1.x) $ ruby -Ilib -rfaraday -rfaraday/net_http -rjson -e "puts JSON.load(Faraday.new(url: 'https://user:[email protected]/headers').get.body)['headers']['Authorization']"
WARNING: `Faraday::Connection#basic_auth` is deprecated; it will be removed in version 2.0.
While initializing your connection, use `#request(:basic_auth, ...)` instead.
See https://lostisland.github.io/faraday/middleware/authentication for more usage info.
Basic dXNlcjpwYXNzd29yZA==
~/src/github.com/lostisland/faraday (main) $ ruby -Ilib -rfaraday -rfaraday/net_http -rjson -e "puts JSON.load(Faraday.new(url: 'https://user:[email protected]/headers').get.body)['headers']['Authorization']"
lib/faraday/connection.rb:365:in `block in url_prefix=': undefined method `basic_auth' for #<Faraday::Connection:0x00007fed250abaa8 @parallel_manager=nil, @headers={}, @params={}, @options=#<Faraday::RequestOptions (empty)>, @ssl=#<Faraday::SSLOptions (empty)>, @default_parallel_manager=nil, @manual_proxy=nil, @builder=#<Faraday::RackBuilder:0x00007fed25092210 @adapter=Faraday::Adapter::NetHttp, @handlers=[Faraday::Request::UrlEncoded]>, @url_prefix=#<URI::HTTPS https://user:[email protected]/headers>> (NoMethodError)
	from lib/faraday/connection.rb:506:in `with_uri_credentials'
	from lib/faraday/connection.rb:364:in `url_prefix='
	from lib/faraday/connection.rb:84:in `initialize'
	from lib/faraday.rb:96:in `new'
	from lib/faraday.rb:96:in `new'
	from -e:1:in `<main>'

While I'm not against deprecating basic_auth and authorization on Connection, I think being able to have basic auth embedded in the URL is really useful (it can be configured in secrets for example).

I added a test here: 1.x...etiennebarrie:test-basic-auth-in-url:

it 'uses User Information from the URI for Basic authentication' do
  conn.url_prefix = 'http://user:[email protected]'
  expect(conn.url_prefix.to_s).to eq('http://sushi.com/')
  request = conn.build_request(:get)
  expect(request.headers['Authorization']).to eq("Basic #{Base64.strict_encode64('user:password')}")
end

@iMacTia
Copy link
Member Author

iMacTia commented Sep 1, 2021

Thanks for reporting this issue @etiennebarrie, I'm surprised we didn't have tests supporting this use-case.
I've opened an issue (#1319) from your comment and will discuss with the team on the course of action, please feel free to join the discussion there

jarl-dk pushed a commit to softace/faraday that referenced this pull request Sep 9, 2021
Merge Authentication middleware.
Add possibility of passing a proc.
Update documentation.

(cherry picked from commit fe600c7)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[2.0] Deprecations to drop
3 participants