update

modules/task/pull_checkout.go

@@ -4,14 +4,19 @@
 package task
 
 import (
+	"encoding/base64"
 	"fmt"
+	"os"
+	"os/exec"
+	"strconv"
+	"strings"
 
 	"code.gitea.io/sdk/gitea"
 	"code.gitea.io/tea/modules/config"
 	local_git "code.gitea.io/tea/modules/git"
+	"code.gitea.io/tea/modules/utils"
 
 	"github.com/go-git/go-git/v5"
-	git_config "github.com/go-git/go-git/v5/config"
 	git_plumbing "github.com/go-git/go-git/v5/plumbing"
 )
 
@@ -78,36 +83,30 @@ func doPRFetch(
 	localRemote *git.Remote,
 	callback func(string) (string, error),
 ) (string, error) {
+	_ = callback
 	localRemoteName := localRemote.Config().Name
 	localBranchName := pr.Head.Ref
-	// get auth & fetch remote via its configured protocol
 	url, err := localRepo.TeaRemoteURL(localRemoteName)
 	if err != nil {
 		return "", err
 	}
-	auth, err := local_git.GetAuthForURL(url, login.GetAccessToken(), login.SSHKey, callback)
-	if err != nil {
-		return "", err
-	}
-	fetchOpts := &git.FetchOptions{Auth: auth}
+	refspecs := []string{}
 	if isRemoteDeleted(pr) {
 		// When the head branch is already deleted, pr.Head.Ref points to
 		// `refs/pull/<idx>/head`, where the commits stay available.
 		// This ref must be fetched explicitly, and does not allow pushing, so we use it
 		// only in this case as fallback.
 		localBranchName = fmt.Sprintf("pulls/%d", pr.Index)
-		fetchOpts.RefSpecs = []git_config.RefSpec{git_config.RefSpec(fmt.Sprintf("%s:refs/remotes/%s/%s",
+		refspecs = append(refspecs, fmt.Sprintf("%s:refs/remotes/%s/%s",
 			pr.Head.Ref,
 			localRemoteName,
 			localBranchName,
-		))}
+		))
 	}
 	fmt.Printf("Fetching PR %v (head %s:%s) from remote '%s'\n", pr.Index, url, pr.Head.Ref, localRemoteName)
 
-	err = localRemote.Fetch(fetchOpts)
-	if err == git.NoErrAlreadyUpToDate {
-		fmt.Println(err)
-	} else if err != nil {
+	err = runGitFetch(localRemoteName, url.String(), login.GetAccessToken(), login.SSHKey, refspecs...)
+	if err != nil {
 		return "", err
 	}
 	return localBranchName, nil
@@ -160,3 +159,52 @@ func doPRCheckout(
 	fmt.Println(info)
 	return localRepo.TeaCheckout(checkoutRef)
 }
+
+func runGitFetch(remoteName, remoteURL, authToken, sshKey string, refspecs ...string) error {
+	args := []string{}
+	if authToken != "" && isHTTPRemote(remoteURL) {
+		args = append(args, "-c", "http.extraheader="+buildGitAuthHeader(authToken))
+	}
+	args = append(args, "fetch")
+	args = append(args, remoteName)
+	args = append(args, refspecs...)
+
+	cmd := exec.Command("git", args...)
+	cmd.Env = os.Environ()
+	if sshKey != "" && isSSHRemote(remoteURL) {
+		absKey, err := utils.AbsPathWithExpansion(sshKey)
+		if err != nil {
+			return err
+		}
+		cmd.Env = append(cmd.Env, "GIT_SSH_COMMAND=ssh -i "+strconv.Quote(absKey)+" -o IdentitiesOnly=yes")
+	}
+
+	output, err := cmd.CombinedOutput()
+	if err == nil {
+		trimmed := string(output)
+		if trimmed != "" {
+			fmt.Print(trimmed)
+		}
+		return nil
+	}
+
+	msg := string(output)
+	if msg == "" {
+		return fmt.Errorf("git fetch %s: %w", remoteName, err)
+	}
+
+	return fmt.Errorf("git fetch %s: %w: %s", remoteName, err, msg)
+}
+
+func buildGitAuthHeader(authToken string) string {
+	encoded := base64.StdEncoding.EncodeToString([]byte(authToken + ":"))
+	return "Authorization: Basic " + encoded
+}
+
+func isHTTPRemote(remoteURL string) bool {
+	return strings.HasPrefix(remoteURL, "http://") || strings.HasPrefix(remoteURL, "https://")
+}
+
+func isSSHRemote(remoteURL string) bool {
+	return strings.HasPrefix(remoteURL, "ssh://")
+}