Commit graph

5 commits

Author SHA1 Message Date
George Macon
42b1e673aa Include the trailing slash in legacy index URL
The PyPI Legacy API documentation [1] says that the distribution
downloads for project can be accessed via a request

    GET /simple/<project>/

but the current implementation instead makes a request

    GET /simple/<project>

There exist some custom repository servers that give erroneous responses
to requests without the slash, so include the slash.

[1]: https://warehouse.pypa.io/api-reference/legacy.html
2021-11-29 16:08:30 -05:00
Johan Wirén
0550a673cc
Handles urls containing "../" 2021-07-01 18:47:49 +02:00
Antoine Eiche
f6765af4e7 Fix insecure ssl in fetch_from_legacy 2021-06-30 21:38:10 +02:00
adisbladis
106c4248ed
fetch_from_legacy: Ignore TLS certificates validity
We want this fetcher to still work even when the CA certs and server
certs are expired or otherwise considered insecure for backwards
compatibility reasons.
2021-06-01 16:25:29 -05:00
Antoine Eiche
28fba9f743
Add support to the legacy Pypi API
Some private repositories (such as Devpi) expose the legacy Pypi
API (https://warehouse.pypa.io/api-reference/legacy.html).

This commit adds a dedicated fetcher which basically queries this API
to get the URL pointing to the actual file.

Since Pypi still exposes this API, it has been possible to write a
test that uses this legacy API.

Fixes https://github.com/nix-community/poetry2nix/issues/277.
2021-06-01 16:25:29 -05:00