get_url and preemptive authentication?

[Mirko Friedenhagen]

Hello,

we provide user specific settings for our Maven repository via a HTTP
GET request[1], but have the usecase that "anonymous" has read-only
access, so authentication is not strictly enforced.

I try to setup our CI system with ansible coming from a shell based
setup, where I have:

curl --netrc -o ~/.m2/settings.xml http://repo/path/settings.xml

Now, curl sends the basic auth header in any case, while get_url[2]
waits for a 401 to come back before offering credentials. So with
get_url the credentials are not used but the settings.xml for
anonymous are downloaded.

I could implement a PR with an option to send authentication
preemptively and default to the current behavior.

On the other hand I think anyone using get_url with url_password knows
that authentication is needed, so IMO sending the auth-header directly
by default would be more useful and the current behavior only produces
the overhead of additional requests.



Regards Mirko
[1] we use Artifactory templating here.
[2] inspecting ansible/module_utils/urls.py
--
http://illegalstateexception.blogspot.com/
https://github.com/mfriedenhagen/ (http://osrc.dfm.io/mfriedenhagen)
https://bitbucket.org/mfriedenhagen/

[Matt Martz]

You might be interested in https://github.com/ansible/ansible-modules-core/pull/153

--
You received this message because you are subscribed to the Google Groups "Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ansible-proje...@googlegroups.com.
To post to this group, send email to ansible...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAK8jvqxMrnvCVyY_piSxLZUM1%2BGEC3%3D%2BFERERSgBXZ5DVDhmPg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

--

Matt Martz
@sivel
sivel.net

[Mirko Friedenhagen]

Hello Matt,

thanks, any chances that this will make it into version 1.8?
Regards Mirko

--
http://illegalstateexception.blogspot.com/
https://github.com/mfriedenhagen/ (http://osrc.dfm.io/mfriedenhagen)
https://bitbucket.org/mfriedenhagen/

> https://groups.google.com/d/msgid/ansible-project/CAD8N0v8w9PzDftGtD_gkqLtoNzqSJEUBWLuOvEy8xZsCz5PXkg%40mail.gmail.com.

[Michael DeHaan]

1.8 is releasing soon so this is unlikely.  

It is prioritized p3 so it's next in line though.

You can use your own version of get_url by dropping in "./library" relative to your playbook, which would allow you to use this today.

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CAK8jvqxCEN7K7AuxDoS4KLX-pA9hZTvjUfg0%3D%3DbF0byFZSEeQw%40mail.gmail.com.

[Mirko Friedenhagen]

Thanks, good to know :-)

Regards
Mirko
--
Sent from my mobile

To view this discussion on the web visit https://groups.google.com/d/msgid/ansible-project/CA%2BnsWgw06X6aP9pBA7X8PBZ%3DSxZozDBbKovbT6KL%3DU%2BYVGAaKw%40mail.gmail.com.