ansible

Commit Graph

Author	SHA1	Message	Date
Yacht Shaver	c7334ea92c	Fix url encoded credentials in netloc (#82552 ) Prior to this commit, it was impossible to use a module like dnf with a URL that contains a username with an @ such as an email address username, because: dnf: name: https://foo@example.com:bar@example.com/some.rpm Would cause netloc parsing to fail. However, the following: dnf: name: https://foo%40example.com:bar@example.com/some.rpm Would also fail because ansible would not URL-decode the credentials, causing the following to be base64 encoded in the Authorization header: Zm9vJTQwZXhhbXBsZS5jb206YmFyCg== Which decodes to: foo%40example.com:foo Which is not the authorized username, and as such, won't pass basic auth. With this commit, Ansible's url lib behaves like curl, chromium, wget, etc, and encodes the above to: Zm9vQGV4YW1wbGUuY29tOmJhcgo= Which decodes to: foo@example.com:bar Which will actually pass the HTTP Basic Auth, and is the same behaviour that you will find ie. with: curl -vvI https://foo%40bar:test@example.com 2>&1 \|grep Auth \| awk '{ print $4 }'	2 years ago
Matt Clay	18e8401edd	Remove Python 2.x compat from unit tests (#82109 )	3 years ago
Matt Martz	92d2c66db2	Remove py2 support from urls.py (#81880 )	3 years ago
Matt Clay	9f899f9492	Require `from __future__ import annotations` (#81902 )	3 years ago
Jordan Borean	0df794e5a4	urls - remove deprecated client key calls (#80751 )	3 years ago
Artur	a26c325bd8	uri: added use_netrc argument to allow ignoring netrc (#74397 ) (#78569 )	4 years ago
Matt Martz	b8025ac160	Allow selection of TLS/SSL ciphers (#78650 ) * Allow selection of TLS/SSL ciphers. Fixes #78633 * Never pass None as the password. Fixes #53373	4 years ago
Matt Martz	d58e69c82d	Add support for gzip decoding responses (#41925 )	4 years ago
Matt Clay	2595b42aca	Prefer unittest.mock over mock. (#77886 )	4 years ago
Zhanwei Wang	1097694355	get_url pass incorrect If-Modified-Since header(#67417 ) (#67419 ) Fix #67417. HTTP header value of `If-Modified-Since` set by `get_url` does not follow HTTP protocol.	6 years ago
Jordan Borean	e747487720	ansible-galaxy - define multiple galaxy instances in ansible.cfg (#60553 ) * ansible-galaxy: support multiple servers on install * Added docs for the server configuration file * Fix up doc string for requirements file format * Fix bugs after testing * Fix kwarg doc and added version * Fix typo and doc improvement * Fix base64 encoding and allow --server to override list	7 years ago
Andrey Klychkov	32de51adac	Unit tests: remove unused imports (#59740 )	7 years ago
Matt Martz	8bd4e2a144	cert validation fixes - Attempt 2 (#55953 ) * Attempt 2 of cert validation fixes * Remove unused code * Cleanup the tmp cert using atexit * Fix linting issues * Only add SSLValidationHandler when not HAS_SSLCONTEXT * Catch value errors on non PEM certs * Only catch NotImplementedError to avoid masking issues * set self._context even with PyOpenSSLContext for conformity * Fix error building * normalize how we interact with the context we create * Remove unused code * Address test for py3.7 message difference * open_url should pass the ca_path through * Account for new error in url lookup test * Guard some code behind whether or not we are validating certs * Make _make_context public * Move atexit.register up to where the tmp file is created	7 years ago
Dag Wieers	4e6c113bf0	uri/win_uri: Make method a free text field (#49719 ) * uri/win_uri: Make method a free text field Since various interfaces introduce their own HTTP method (e.g. like PROPFIND, LIST or TRACE) it's better to leave this up to the user. * Fix HTTP method check in module_utils urls * Add integration test for method UNKNOWN * Clarify the change as requested during review	7 years ago
Matt Martz	77bfcad33a	Support unix socket with urls/uri (#43560 ) * First pass at allowing unix socket with urls/uri. See #42341 * Only insert handler as needed * Fix and add tests * Add HTTPS functionality for unix sockets * Additional test fixes * Create context manager for monkey patching HTTPConnection.connect, de-dupe code, raise better errors * doc * Add a few more tests * Fix __call__ * Remove unused import * Patch HTTPConnection.connect with the functionality we want, instead of duplicating code and disabling * Fix var name * Remove unused var * Add changelog fragment * Update uri docs * Fix rebase indentation issue	7 years ago
Juan Antonio Osorio	9f081ca04f	identity: Add GSSAPI suport for FreeIPA authentication (#52031 ) * identity: Add GSSAPI suport for FreeIPA authentication This enables the usage of GSSAPI for authentication, instead of having to pass the username and password as part of the playbook run. If there is GSSAPI support, this makes the password optional, and will be able to use the KRB5_CLIENT_KTNAME or the KRB5CCNAME environment variables; which are standard when using kerberos authentication. Note that this depends on the urllib_gssapi library, and will only enable this if that library is available. * identity: Add documentation for GSSAPI authentication for FreeIPA This documentation describes how to use GSSAPI authentication with the IPA identity modules. * identity: Add changelog for GSSAPI support for IPA This adds the changelog entry for the GSSAPI authentication feature for the IPA identity module.	7 years ago
Matt Martz	0221d1ad20	Introduce and use locale-naive rfc2822 date format function (#44868 ) * Introduce and use locale-naive rfc2822 date format function. Fixes #44857 * Adjust test expected response	8 years ago
Matt Martz	d4930e6692	Add requests.Session like class (#37622 ) * Adds requests.Session like class * py2 syntax fix * Add a few examples to the Request docstrings * Add helper methods and docs * Fix test failures * Switch tests to test Request instead of open_url, add simple open_url test to validate funcitonality * Fix filename in replace-urlopen code smell test	8 years ago

18 Commits (4e69d83fac2efff3ac8f2fbc8a1e8a9728edc57e)