Skip to content

Passthrough HTTP headers to remote downloader service#21490

Closed
sushain97 wants to merge 1 commit intobazelbuild:masterfrom
sushain97:passthrough-http-header
Closed

Passthrough HTTP headers to remote downloader service#21490
sushain97 wants to merge 1 commit intobazelbuild:masterfrom
sushain97:passthrough-http-header

Conversation

@sushain97
Copy link
Copy Markdown
Contributor

@sushain97 sushain97 requested a review from a team as a code owner February 24, 2024 23:52
@github-actions github-actions Bot added team-Remote-Exec Issues and PRs for the Execution (Remote) team awaiting-review PR is awaiting review from an assigned reviewer labels Feb 24, 2024
@meteorcloudy meteorcloudy requested a review from tjgq February 26, 2024 10:33
@tjgq tjgq added awaiting-PR-merge PR has been approved by a reviewer and is ready to be merge internally and removed awaiting-review PR is awaiting review from an assigned reviewer labels Feb 26, 2024
@iancha1992
Copy link
Copy Markdown
Member

@bazel-io fork 7.1.0

@github-actions github-actions Bot removed the awaiting-PR-merge PR has been approved by a reviewer and is ready to be merge internally label Feb 27, 2024
bazel-io pushed a commit to bazel-io/bazel that referenced this pull request Feb 27, 2024
Related to bazelbuild#17829 and bazelbuild@2697e0c

I don't love this design but according to the Remote Asset API spec, this is an intended use of qualifiers: https://docs.google.com/document/d/10ari9WtTTSv9bqB_UU-oe2gBtaAA7HyQgkpP-RFP80c/edit#heading=h.sixrlhdnkfoa.

cc @Wyverald @jmillikin

Closes bazelbuild#21490.

PiperOrigin-RevId: 610688317
Change-Id: I272f63a6bc4ea432503003ee907ca012f6d641cf
@Yannic
Copy link
Copy Markdown
Contributor

Yannic commented Feb 27, 2024

Sending the headers (especially Authorization) is questionable from a security perspective: GHSA-mxr8-q875-rhwq

github-merge-queue Bot pushed a commit that referenced this pull request Mar 4, 2024
Related to #17829 and
2697e0c

I don't love this design but according to the Remote Asset API spec,
this is an intended use of qualifiers:
https://docs.google.com/document/d/10ari9WtTTSv9bqB_UU-oe2gBtaAA7HyQgkpP-RFP80c/edit#heading=h.sixrlhdnkfoa.

cc @Wyverald @jmillikin

Closes #21490.

Commit
2195baa

PiperOrigin-RevId: 610688317
Change-Id: I272f63a6bc4ea432503003ee907ca012f6d641cf

Co-authored-by: Sushain Cherivirala <[email protected]>
@iancha1992
Copy link
Copy Markdown
Member

The changes in this PR have been included in Bazel 7.1.0 RC2. Please test out the release candidate and report any issues as soon as possible.
If you're using Bazelisk, you can point to the latest RC by setting USE_BAZEL_VERSION=7.1.0rc2. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

team-Remote-Exec Issues and PRs for the Execution (Remote) team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants