Authorization check before upload

[markgalpin]

When uploading a very large file, would it be possible to check if the user has write permissions before the file is fully uploaded? Can be a very long delay waiting for the upload just to get a 401.

[eyalbe4]

Thanks for raising this topic @markgalpin. We're considering the available options for improving the outcome in this scenario, while keeping the CLI as efficient as it is today, in terms of the total of requests it needs to send to Artifactory for files upload.

[nmiyake]

Wanted to echo the sentiment on this -- in our use case, I'm pretty sure that the time we would save by not doing uploads that could have been known to fail would outweigh the extra connection/request to check to see if the operation would succeed. Perhaps this could be added as a CLI option?

@eyalbe4 is there an existing API/REST call that could be used to check permissions? Also, would it also identify the case in which an overwrite attempt would fail? If so, would love to know what the API call is so that I can play around with either adding it to a fork or trying it out with some of our current bash Artifactory upload scripts.

[nmiyake]

As a follow-up, read through the REST APIs again and couldn't find the call I think I want, which is roughly "will the upload attempt succeed given the request and the credentials provided?" The --dry-run option also doesn't seem to do this (it reported as success even for an operation that would fail).

[andvgal]

@eyalbe4 just a suggestion as this item seems to hang here for a while:

1. I guess Artifactory supports HTTP "100 Continue" quite well as it works with cURL where it is the default behavior. JFrog CLI can behave the same way with "Except" header in pilot request.
2. To avoid performance penalties for smaller files, it can be conditionally enabled based on file size with a reasonable default of e.g. 10 MB.
3. Such check makes sense only for the first file upload in a batch. So, there is another optimization to minimize possible performance impact - only +1 request per CLI invocation.

[eyalbe4]

This is an interesting idea @andvgal. Thanks.
We will try this out and update here further.

[shuvadipc]

Addressed.