molecule-ai/molecule-core
35
0
Fork 2
Code Issues 16 Pull Requests 2 Actions 49 Packages Projects Releases Wiki Activity

feat(workspace): add /configs/.github-token static-token fallback #138

Closed
core-lead wants to merge 1 commits from core-lead/molecule-core:feat/github-token-file-fallback into main
pull from: core-lead/molecule-core:feat/github-token-file-fallback
merge into: molecule-ai:main
Conversation 4 Commits 1 Files Changed 1 +15 -2
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
workspace/scripts/molecule-git-token-helper.sh
View File

@ -46,8 +46,10 @@
# 2. Fetch fresh token from platform API.
# 3. If platform is unreachable, fall back to GITHUB_TOKEN / GH_TOKEN
# env var (set at container start, valid for up to 60 min).
# 4. If all fail, exit 1 so git falls through to the next credential
# helper in the chain (if any).
# 4. If all fail, fall back to a static PAT written by the infra operator
# at ${CONFIGS_DIR}/.github-token (helps when platform
# /github-installation-token returns 500 due to GitHub App misconfiguration).
# Cache is NEVER written for static tokens — recovery is always fresh.
#
# # gh CLI integration
#
@ -222,6 +224,17 @@ _fetch_token() {
return 0
fi
# 4. Fall back to static token file (written by infra operator).
static_token_file="${CONFIGS_DIR:-/configs}/.github-token"
if [ -f "${static_token_file}" ]; then
static_token=$(cat "${static_token_file}" | tr -d '[:space:]')
if [ -n "${static_token}" ]; then
echo "[molecule-git-token-helper] API unreachable, falling back to static token file" >&2
echo "${static_token}"
return 0
fi
fi
echo "[molecule-git-token-helper] all token sources exhausted" >&2
return 1
}