uv/crates
Zanie Blue f98eca8843
Fix authentication for URLs with a shared realm (#3130)
In #2976 I made some changes that led to regressions:

- We stopped tracking URLs that we had not seen credentials for in the
cache
- This means the cache no longer returns a value to indicate we've seen
a realm before
- We stopped seeding the cache with URLs 
- Combined with the above, this means we no longer had a list of
locations that we would never attempt to fetch credentials for
- We added caching of credentials found on requests
- Previously the cache was only populated from the seed or credentials
found in the netrc or keyring
- This meant that the cache was populated for locations that we
previously did not cache, i.e. GitHub artifacts(?)

Unfortunately this unveiled problems with the granularity of our cache.
We cache credentials per realm (roughly the hostname) but some realms
have mixed authentication modes i.e. different credentials per URL or
URLs that do not require credentials. Applying credentials to a URL that
does not require it can lead to a failed request, as seen in #3123 where
GitHub throws a 401 when receiving credentials.

To resolve this, the cache is expanded to supporting caching at two
levels:

- URL, cached URL must be a prefix of the request URL
- Realm, exact match required

When we don't have URL-level credentials cached, we attempt the request
without authentication first. On failure, we'll search for realm-level
credentials or fetch credentials from external services. This avoids
providing credentials to new URLs unless we know we need them.

Closes https://github.com/astral-sh/uv/issues/3123
2024-04-22 13:06:57 -05:00
..
bench Avoid repeating paths of workspace packages (#2573) 2024-03-20 16:16:02 -04:00
cache-key Avoid cache invalidation on credentials renewal (#3010) 2024-04-13 23:38:24 +00:00
distribution-filename Add support for .tar.bz2 source distributions (#3069) 2024-04-16 18:34:55 +00:00
distribution-types Rename the second direct url to parsed url (#3187) 2024-04-22 14:38:27 +00:00
install-wheel-rs Add JSON Schema support (#3046) 2024-04-17 17:24:41 +00:00
once-map Remove unused deps (#1273) 2024-02-11 18:53:58 +00:00
pep440-rs Update pubgrub to use a dependency provider (#2648) 2024-03-25 15:51:31 +01:00
pep508-rs Move unnamed requirements to their own pep508_rs module and requirements-txt (#3186) 2024-04-22 14:02:39 +00:00
platform-tags Support freethreading python (#2805) 2024-04-12 09:39:47 +00:00
pypi-types Replace unwrap with ? in hash generation (#3003) 2024-04-12 00:41:08 +00:00
requirements-txt Move unnamed requirements to their own pep508_rs module and requirements-txt (#3186) 2024-04-22 14:02:39 +00:00
uv Fix authentication for URLs with a shared realm (#3130) 2024-04-22 13:06:57 -05:00
uv-auth Fix authentication for URLs with a shared realm (#3130) 2024-04-22 13:06:57 -05:00
uv-build Force color for build error messages (#3032) 2024-04-15 18:12:54 +02:00
uv-cache Remove Option<bool> for --no-cache (#3129) 2024-04-18 22:56:46 +00:00
uv-client Fix authentication for URLs with a shared realm (#3130) 2024-04-22 13:06:57 -05:00
uv-configuration Add --python-platform to configuration (#3147) 2024-04-19 23:08:03 +00:00
uv-dev Add JSON Schema support (#3046) 2024-04-17 17:24:41 +00:00
uv-dispatch Use link mode for builds, in uv pip compile and for uv venv seed packages (#3016) 2024-04-15 08:49:41 +00:00
uv-distribution Dedicated error type for direct url parsing (#3181) 2024-04-22 11:57:36 +00:00
uv-extract Add support for .tar.bz2 source distributions (#3069) 2024-04-16 18:34:55 +00:00
uv-fs Make the junction crate dependency Windows-only (#3043) 2024-04-15 16:01:24 -05:00
uv-git Dedicated error type for direct url parsing (#3181) 2024-04-22 11:57:36 +00:00
uv-installer Rename the second direct url to parsed url (#3187) 2024-04-22 14:38:27 +00:00
uv-interpreter Allow --python and --system on pip compile (#3115) 2024-04-18 04:55:49 +00:00
uv-normalize Add JSON Schema support (#3046) 2024-04-17 17:24:41 +00:00
uv-requirements Move unnamed requirements to their own pep508_rs module and requirements-txt (#3186) 2024-04-22 14:02:39 +00:00
uv-resolver Restrict observed requirements to direct when --no-deps is specified (#3191) 2024-04-22 17:17:58 +00:00
uv-toolchain Add JSON Schema support (#3046) 2024-04-17 17:24:41 +00:00
uv-trampoline Use c-string literals and update trampolines (#2590) 2024-03-21 15:36:00 +00:00
uv-types Move unnamed requirements to their own pep508_rs module and requirements-txt (#3186) 2024-04-22 14:02:39 +00:00
uv-version Bump version to v0.1.35 (#3153) 2024-04-19 19:58:15 -04:00
uv-virtualenv Add support for embedded Python on Windows (#3161) 2024-04-22 13:34:27 -04:00
uv-warnings Rename to uv (#1302) 2024-02-15 11:19:46 -06:00
uv-workspace Add --python-platform to configuration (#3147) 2024-04-19 23:08:03 +00:00
README.md Rename uv-traits and split into separate modules (#2674) 2024-03-26 15:39:43 -05:00

Crates

bench

Functionality for benchmarking uv.

cache-key

Generic functionality for caching paths, URLs, and other resources across platforms.

distribution-filename

Parse built distribution (wheel) and source distribution (sdist) filenames to extract structured metadata.

distribution-types

Abstractions for representing built distributions (wheels) and source distributions (sdists), and the sources from which they can be downloaded.

install-wheel-rs

Install built distributions (wheels) into a virtual environment.]

once-map

A waitmap-like concurrent hash map for executing tasks exactly once.

pep440-rs

Utilities for interacting with Python version numbers and specifiers.

pep508-rs

Utilities for interacting with PEP 508 dependency specifiers.

platform-host

Functionality for detecting the current platform (operating system, architecture, etc.).

platform-tags

Functionality for parsing and inferring Python platform tags as per PEP 425.

uv

Command-line interface for the uv package manager.

uv-build

A PEP 517-compatible build frontend for uv.

uv-cache

Functionality for caching Python packages and associated metadata.

uv-client

Client for interacting with PyPI-compatible HTTP APIs.

uv-dev

Development utilities for uv.

uv-dispatch

A centralized struct for resolving and building source distributions in isolated environments. Implements the traits defined in uv-types.

uv-distribution

Client for interacting with built distributions (wheels) and source distributions (sdists). Capable of fetching metadata, distribution contents, etc.

uv-extract

Utilities for extracting files from archives.

uv-fs

Utilities for interacting with the filesystem.

uv-git

Functionality for interacting with Git repositories.

uv-installer

Functionality for installing Python packages into a virtual environment.

uv-interpreter

Functionality for detecting and leveraging the current Python interpreter.

uv-normalize

Normalize package and extra names as per Python specifications.

uv-package

Types and functionality for working with Python packages, e.g., parsing wheel files.

uv-requirements

Utilities for reading package requirements from pyproject.toml and requirements.txt files.

uv-resolver

Functionality for resolving Python packages and their dependencies.

uv-types

Shared traits for uv, to avoid circular dependencies.

pypi-types

General-purpose type definitions for types used in PyPI-compatible APIs.

uv-virtualenv

A venv replacement to create virtual environments in Rust.

uv-warnings

User-facing warnings for uv.

requirements-txt

Functionality for parsing requirements.txt files.