Function getDockerToken

cli/internal/publish/plugins.go:425–487

(ctx context.Context, ref reference.Named, version, team, username, password string, insecureSkipVerify bool)

}

func getDockerToken(ctx context.Context, ref reference.Named, version, team, username, password string, insecureSkipVerify bool) (string, error) {
	// https://distribution.github.io/distribution/spec/auth/token/#how-to-authenticate
	domain := reference.Domain(ref)
	name := reference.Path(ref)

	customTransport := http.DefaultTransport.(*http.Transport).Clone()
	customTransport.TLSClientConfig = &tls.Config{InsecureSkipVerify: insecureSkipVerify}
	httpClient := &http.Client{Transport: customTransport}

	challengeUrl := fmt.Sprintf("https://%[1]s/v2/%[2]s/manifests/%[3]s", domain, name, version)
	challengeReq, err := http.NewRequestWithContext(ctx, http.MethodPut, challengeUrl, nil)
	if err != nil {
		return "", fmt.Errorf("client: could not create request: %s", err)
	}
	challengeRes, err := httpClient.Do(challengeReq)
	if err != nil {
		return "", fmt.Errorf("client: could not send request: %s", err)
	}
	defer challengeRes.Body.Close()
	if challengeRes.StatusCode != http.StatusUnauthorized {
		return "", fmt.Errorf("client: unexpected status code: %d", challengeRes.StatusCode)
	}
	challengeHeader := challengeRes.Header.Get("WWW-Authenticate")
	if challengeHeader == "" {
		return "", errors.New("client: missing WWW-Authenticate header")
	}
	challenges := challenge.ResponseChallenges(challengeRes)
	if len(challenges) != 1 {
		return "", fmt.Errorf("client: expected 1 challenge header, got %d. Header value %q", len(challenges), challengeHeader)
	}
	realm := challenges[0].Parameters["realm"]
	service := challenges[0].Parameters["service"]
	scope := challenges[0].Parameters["scope"]
	if realm == "" || service == "" || scope == "" {
		return "", fmt.Errorf("client: could not parse challenge header %q", challengeHeader)
	}

	url := fmt.Sprintf("%[1]s?account=cli&service=%[2]s&scope=%[3]s", realm, service, scope)
	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
	basicAuth := base64.StdEncoding.EncodeToString([]byte(username + ":" + password))
	req.Header.Add("X-Meta-Plugin-Version", version)
	req.Header.Add("X-Meta-User-Team-Name", team)
	req.Header.Add("Authorization", "Basic "+basicAuth)
	if err != nil {
		return "", fmt.Errorf("client: could not create request: %s", err)
	}

	res, err := httpClient.Do(req)
	if err != nil {
		return "", fmt.Errorf("client: could not send request: %s", err)
	}
	defer res.Body.Close()

	if res.StatusCode != http.StatusOK {
		return "", fmt.Errorf("client: unexpected status code: %d", res.StatusCode)
	}

	tokenResponse := map[string]string{}