fix(paw): authenticate publish_app/update_app to Genesis with genesis_token - #402
Open
rita-aga wants to merge 1 commit into
Open
fix(paw): authenticate publish_app/update_app to Genesis with genesis_token#402rita-aga wants to merge 1 commit into
rita-aga wants to merge 1 commit into
Conversation
…_token temper.publish_app()/update_app() pushed app bundles to the Genesis registry and called its OData actions with only an X-Tenant-Id header and no credential, so the git push failed with "could not read Username" (no tty to prompt) and registry calls were unauthenticated. Attach the genesis_token GitToken as Authorization: Bearer on both the git push (a second http.<url>.extraHeader) and the registry OData calls, and fail with a clear message if the secret is unset instead of the cryptic git error. genesis_bearer() is unit-tested. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The agent tools
temper.publish_app()/update_app()already pushed bundles to Genesis + registered versions, but attached no credential — onlyX-Tenant-Id. So the git push failed withcould not read Username(the exact error agents hit) and OData calls were unauthenticated.This attaches the
genesis_tokenGitToken asAuthorization: Beareron both the git push (a secondhttp.<url>.extraHeader) and the registry OData calls, and returns a clear error if the secret is unset instead of the cryptic git failure. Pure helpergenesis_bearer()is unit-tested; wasm builds clean.Companion to #400 (which seeds
genesis_tokeninto the vault). With both deployed, agents can publish to Genesis viatemper.publish_append-to-end.