StudioTeal/GodotBinaryBuilder
2
0
Fork 0
Code Issues Pull requests Projects Releases 21 Packages 6 Wiki Activity Actions

fix(runner): encode registry auth with padding the daemon can decode #20

Merged
picklemustard merged 1 commit from fix/registry-auth-padding into main 2026-10-04 18:07:10 +00:00
Conversation 0 Commits 1 Files changed 2 +39 -36
picklemustard commented 2026-10-04 17:17:32 +00:00
Owner
Copy link

RegistryAuth encoded X-Registry-Auth as unpadded base64url, but the
daemon decodes it with registry.DecodeAuthConfig, which requires
padding. Whenever the credential JSON length was not a multiple of
three, decoding failed; the daemon drops that error and pulls
anonymously, so the private studioteal-private/gbb-macos image failed
with "unauthorized: reqPackageAccess" despite a valid token.

Use registry.EncodeAuthConfig, the daemon decoder's counterpart, and
test the round trip through DecodeAuthConfig across JSON lengths.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

RegistryAuth encoded X-Registry-Auth as unpadded base64url, but the daemon decodes it with registry.DecodeAuthConfig, which requires padding. Whenever the credential JSON length was not a multiple of three, decoding failed; the daemon drops that error and pulls anonymously, so the private studioteal-private/gbb-macos image failed with "unauthorized: reqPackageAccess" despite a valid token. Use registry.EncodeAuthConfig, the daemon decoder's counterpart, and test the round trip through DecodeAuthConfig across JSON lengths. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
fix(runner): encode registry auth with padding the daemon can decode
All checks were successful
CI / Dedupe (push) Successful in 11s
Details
CI / Go (push) Successful in 3m29s
Details
CI / Frontend (push) Successful in 31s
Details
CI / Badges (push) Has been skipped
Details
CI / Publish images (push) Has been skipped
Details
CI / Dedupe (pull_request) Successful in 21s
Details
CI / Go (pull_request) Successful in 1m26s
Details
CI / Frontend (pull_request) Successful in 34s
Details
CI / Badges (pull_request) Has been skipped
Details
CI / Publish images (pull_request) Has been skipped
Details
a0f74cebe0
 
RegistryAuth encoded X-Registry-Auth as unpadded base64url, but the
daemon decodes it with registry.DecodeAuthConfig, which requires
padding. Whenever the credential JSON length was not a multiple of
three, decoding failed; the daemon drops that error and pulls
anonymously, so the private studioteal-private/gbb-macos image failed
with "unauthorized: reqPackageAccess" despite a valid token.

Use registry.EncodeAuthConfig, the daemon decoder's counterpart, and
test the round trip through DecodeAuthConfig across JSON lengths.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
StudioTeal/GodotBinaryBuilder!20
No description provided.