fix: remove authorization header from core.windows.net requests for A…

…zure docker registries
renovatebot · Jun 30, 2020 · 738f5f6 · 738f5f6
1 parent d70b8c1
commit 738f5f6
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/lib/util/http/index.ts b/lib/util/http/index.ts
@@ -95,6 +95,13 @@ export class Http<GetOptions = HttpOptions, PostOptions = HttpPostOptions> {
             delete opts.headers.authorization; // eslint-disable-line no-param-reassign
             delete opts.auth; // eslint-disable-line no-param-reassign
           }
+
+          if (opts.href?.includes('blob.core.windows.net')) {
+            // docker registry is hosted on Azure blob, redirect url includes authentication.
+            // eslint-disable-next-line no-param-reassign
+            delete opts.headers.authorization; // eslint-disable-line no-param-reassign
+            delete opts.auth; // eslint-disable-line no-param-reassign
+          }
         },
       ],
     };