1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
// Copyright The Notary Project Authors.
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package main
import (
"os"
"github.com/spf13/pflag"
"oras.land/oras-go/v2/registry/remote/auth"
)
const (
defaultUsernameEnv = "NOTATION_USERNAME"
defaultPasswordEnv = "NOTATION_PASSWORD"
defaultMediaType = "application/vnd.docker.distribution.manifest.v2+json"
)
var (
flagUsername = &pflag.Flag{
Name: "username",
Shorthand: "u",
Usage: "username for registry operations (default to $NOTATION_USERNAME if not specified)",
}
setflagUsername = func(fs *pflag.FlagSet, p *string) {
fs.StringVarP(p, flagUsername.Name, flagUsername.Shorthand, "", flagUsername.Usage)
}
flagPassword = &pflag.Flag{
Name: "password",
Shorthand: "p",
Usage: "password for registry operations (default to $NOTATION_PASSWORD if not specified)",
}
setFlagPassword = func(fs *pflag.FlagSet, p *string) {
fs.StringVarP(p, flagPassword.Name, flagPassword.Shorthand, "", flagPassword.Usage)
}
flagInsecureRegistry = &pflag.Flag{
Name: "insecure-registry",
Usage: "use HTTP protocol while connecting to registries. Should be used only for testing",
DefValue: "false",
}
setFlagInsecureRegistry = func(fs *pflag.FlagSet, p *bool) {
fs.BoolVar(p, flagInsecureRegistry.Name, false, flagInsecureRegistry.Usage)
}
)
type SecureFlagOpts struct {
Username string
Password string
InsecureRegistry bool
}
// ApplyFlags set flags and their default values for the FlagSet
func (opts *SecureFlagOpts) ApplyFlags(fs *pflag.FlagSet) {
setflagUsername(fs, &opts.Username)
setFlagPassword(fs, &opts.Password)
setFlagInsecureRegistry(fs, &opts.InsecureRegistry)
opts.Username = os.Getenv(defaultUsernameEnv)
opts.Password = os.Getenv(defaultPasswordEnv)
}
// Credential returns an auth.Credential from opts.Username and opts.Password.
func (opts *SecureFlagOpts) Credential() auth.Credential {
if opts.Username == "" {
return auth.Credential{
RefreshToken: opts.Password,
}
}
return auth.Credential{
Username: opts.Username,
Password: opts.Password,
}
}
|
