Method getUsernameAndPassword

pkg/credentials/github/app.go:144–197

getUsernameAndPassword gets a username (kargo) and password (installation access token) for the given app/client ID, installation ID, PEM-encoded GitHub App private key, and repo URL.

(
	ctx context.Context,
	appOrClientID string,
	installationID int64,
	encodedPrivateKey string,
	repoURL string,
)

// access token) for the given app/client ID, installation ID, PEM-encoded
// GitHub App private key, and repo URL.
func (p *AppCredentialProvider) getUsernameAndPassword(
	ctx context.Context,
	appOrClientID string,
	installationID int64,
	encodedPrivateKey string,
	repoURL string,
) (*credentials.Credentials, error) {
	cacheKey := p.tokenCacheKey(
		appOrClientID,
		installationID,
		encodedPrivateKey,
		repoURL,
	)

	logger := logging.LoggerFromContext(ctx).WithValues(
		"provider", "githubApp",
		"repoURL", repoURL,
	)

	// Check the cache for the token
	if entry, exists := p.tokenCache.Get(cacheKey); exists {
		logger.Debug("installation access token cache hit")
		return &credentials.Credentials{
			Username: accessTokenUsername,
			Password: entry.(string), // nolint: forcetypeassert
		}, nil
	}
	logger.Debug("installation access token cache miss")

	// Cache miss, get a new token
	token, err := p.getAccessTokenFn(
		appOrClientID,
		installationID,
		encodedPrivateKey,
		repoURL,
	)
	if err != nil {
		return nil, fmt.Errorf("error getting installation access token: %w", err)
	}
	logger.Debug("obtained new installation access token")

	ttl := credentials.CalculateCacheTTL(token.Expiry, tokenCacheExpiryMargin)
	logger.Debug(
		"caching installation access token",
		"expiry", token.Expiry,
		"ttl", ttl,
	)
	p.tokenCache.Set(cacheKey, token.AccessToken, ttl)

	return &credentials.Credentials{
		Username: accessTokenUsername,
		Password: token.AccessToken,
	}, nil
}

// getAccessToken gets an installation access token for the given app/client ID,
// installation ID, PEM-encoded GitHub App private key, and repo URL.