dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard

Authentication not working with azure repositories

Open vishalbalaji-v opened this issue 1 year ago • 0 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Package ecosystem

pip

Package manager version

No response

Language version

python 3.12

Manifest location and content before the Dependabot update

No response

dependabot.yml content

version: 2
registries:
  python-azure:
    type: python-index
    url: https://pkgs.dev.azure.com/ORG_NAME/_packaging/ArtifactRepository/pypi/simple/
    username: ORG_NAME
    password: ${{secrets.PYTHON_REGISTRY_PKGS_DEV_AZURE_COM_ORG_NAME_PACKAGING_ARTIFACTR_PASSWORD}}
updates:
  - package-ecosystem: "pip" # See documentation for possible values
    directory: "/"
    insecure-external-code-execution: allow
    registries:
      - python-azure
    schedule:
      interval: "weekly"
    labels:
      - "patch"
      - "dependencies"
    reviewers:
      - TEAM_NAME
    target-branch: "main"

Updated dependency

No response

What you expected to see, versus what you actually saw

What I expect to see

updater | 2024/02/07 16:00:10 INFO <job_784227778> Checking if fastapi  needs updating
  proxy | 2024/02/07 16:00:10 [015] GET https://pypi.org:443/simple/fastapi/
  proxy | 2024/02/07 16:00:10 [015] 200 https://pypi.org:443/simple/fastapi/
  proxy | 2024/02/07 16:00:11 [019] GET https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/ArtifactRepository/pypi/simple/fastapi/
  proxy | 2024/02/07 16:00:11 [019] * authenticating python index request (host: pkgs.dev.azure.com)
  proxy | 2024/02/07 16:00:11 [019] 200 https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/ArtifactRepository/pypi/simple/fastapi/
updater | 2024/02/07 16:00:11 INFO <job_784227778> Latest version is 0.109.2

Instead I get a 401 error saying it's not able to access the repository. I have verified that the tokens themselves work, and Dependabot itself is working on some repositories and not on others.

 proxy | 2024/02/12 03:53:49 [047] GET https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/ArtifactRepository/pypi/simple/PACKAGE_NAME/
  proxy | 2024/02/12 03:53:49 [047] * authenticating python index request (host: pkgs.dev.azure.com)
  proxy | 2024/02/12 03:53:49 [047] 200 https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/ArtifactRepository/pypi/simple/PACKAGE_NAME/
  proxy | 2024/02/12 03:53:49 [049] GET https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/UPSTREAM_REPO/pypi/download/PACKAGE_NAME/0.0.1/PACKAGE_NAME-0.0.1-py3-none-any.whl
  proxy | 2024/02/12 03:53:49 [049] 401 https://pkgs.dev.azure.com:443/ORG_NAME/_packaging/UPSTREAM_REPO/pypi/download/PACKAGE_NAME/0.0.1/PACKAGE_NAME-0.0.1-py3-none-any.whl
  proxy | 2024/02/12 03:53:49 [049] Remote response: {"$id":"1","innerException":null,"message":"TF400813: The user 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa' is not authorized to access this resource.","typeName":"Microsoft.TeamFoundation.Framework.Server.UnauthorizedRequestException, Microsoft.TeamFoundation.Framework.Server","typeKey":"UnauthorizedRequestException","errorCode":0,"eventId":3000}

Native package manager behavior

No response

Images of the diff or a link to the PR, issue, or logs

No response

Smallest manifest that reproduces the issue

No response

Additional Info

It is basically this same issue, but for Python

vishalbalaji-v avatar Feb 12 '24 09:02 vishalbalaji-v