Skip to content

Support private token headers for composer

What does this MR do?

PHP Composer handles authentication differently for gitlab which leads to 404 error when trying to use it with the current auth method (Basic HTTP Auth).

This introduces support for PAT via Private Token header as natively supported by Composer.

NOTE: Part of what was required to make this work with PAT was merged in !38858 (merged)

Screenshots

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team

Closes #232636 (closed)

Edited by Giorgenes Gelatti

Merge request reports