devpi-server 6.20.0__tar.gz → 6.20.1__tar.gz

{devpi_server-6.20.0 → devpi_server-6.20.1}/CHANGELOG

@@ -2,6 +2,15 @@
 
 .. towncrier release notes start
 
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
 6.20.0 (2026-04-30)
 ===================
 

{devpi_server-6.20.0 → devpi_server-6.20.1}/CHANGELOG.short.rst

@@ -9,6 +9,15 @@ Changelog
 
 .. towncrier release notes start
 
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
 6.20.0 (2026-04-30)
 ===================
 
@@ -66,32 +75,3 @@ Bug Fixes
 
 - Always allow replicas to access deleted releases to get the proper ``410 Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
 
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
-  Automatically creates users that don't exist in devpi, but have successfully authenticated via an authentication plugin.
-  A typical example of when to enable this would be when authenticating via an LDAP directory.
-  Automatically created users do not have passwords, and have no password hash to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and ``replica-metadata-in-sync-at`` to status view, the existing ``replica-in-sync-at`` is now a combination of all three instead of just metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be aware that some commands don't use all the options, that is why this only warns instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the ``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from ``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working in 6.18.0.
-

{devpi_server-6.20.0 → devpi_server-6.20.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devpi-server
-Version: 6.20.0
+Version: 6.20.1
 Summary: devpi-server: backend for hosting private package indexes and PyPI on-demand mirrors
 Maintainer-email: Florian Schulze <mail@pyfidelity.com>
 License-Expression: MIT
@@ -121,6 +121,15 @@ Changelog
 
 .. towncrier release notes start
 
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
 6.20.0 (2026-04-30)
 ===================
 
@@ -178,32 +187,3 @@ Bug Fixes
 
 - Always allow replicas to access deleted releases to get the proper ``410 Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
 
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
-  Automatically creates users that don't exist in devpi, but have successfully authenticated via an authentication plugin.
-  A typical example of when to enable this would be when authenticating via an LDAP directory.
-  Automatically created users do not have passwords, and have no password hash to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and ``replica-metadata-in-sync-at`` to status view, the existing ``replica-in-sync-at`` is now a combination of all three instead of just metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be aware that some commands don't use all the options, that is why this only warns instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the ``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from ``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working in 6.18.0.
-

devpi_server-6.20.1/devpi_server/__init__.py

@@ -0,0 +1 @@
+__version__ = "6.20.1"

{devpi_server-6.20.0 → devpi_server-6.20.1}/devpi_server/views.py

@@ -20,6 +20,7 @@ from .model import InvalidUserconfig
 from .model import ReadonlyIndex
 from .model import RemoveValue
 from .normalized import normalize_name
+from .proxy import clean_request_headers
 from .proxy import clean_response_headers
 from .readonly import get_mutable_deepcopy
 from collections import defaultdict
@@ -1585,7 +1586,9 @@ class PyPIView:
                 return apireturn(404, "mirror_provides_core_metadata disabled")
             url = url.replace(path=f"{url.path}.metadata")
             try:
-                app_iter = iter_stream_remote_file(stage, url)
+                app_iter = iter_stream_remote_file(
+                    stage, url, clean_request_headers(request)
+                )
                 headers = next(app_iter)
             except BadGateway as e:
                 if e.code == 404:
@@ -1901,9 +1904,12 @@ class FileStreamer:
                 raise err
 
 
-def iter_stream_remote_file(stage, url):
+def iter_stream_remote_file(stage, url, headers):
     with contextlib.ExitStack() as cstack:
-        r = stage.http.stream(cstack, "GET", url, allow_redirects=True)
+        headers.pop("User-Agent", None)
+        r = stage.http.stream(
+            cstack, "GET", url, allow_redirects=True, extra_headers=headers
+        )
         if r.status_code != 200:
             r.close()
             msg = f"error {r.status_code} getting {url}"

{devpi_server-6.20.0 → devpi_server-6.20.1}/devpi_server.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devpi-server
-Version: 6.20.0
+Version: 6.20.1
 Summary: devpi-server: backend for hosting private package indexes and PyPI on-demand mirrors
 Maintainer-email: Florian Schulze <mail@pyfidelity.com>
 License-Expression: MIT
@@ -121,6 +121,15 @@ Changelog
 
 .. towncrier release notes start
 
+6.20.1 (2026-05-11)
+===================
+
+Bug Fixes
+---------
+
+- Pass through request headers when streaming .metadata from mirror. Refs #1018
+
+
 6.20.0 (2026-04-30)
 ===================
 
@@ -178,32 +187,3 @@ Bug Fixes
 
 - Always allow replicas to access deleted releases to get the proper ``410 Gone`` instead of ``403 Forbidden`` when ``devpi-lockdown`` is in use.
 
-
-6.19.0 (2026-02-06)
-===================
-
-Features
---------
-
-- Add ``--autocreate-users`` server option.
-  Automatically creates users that don't exist in devpi, but have successfully authenticated via an authentication plugin.
-  A typical example of when to enable this would be when authenticating via an LDAP directory.
-  Automatically created users do not have passwords, and have no password hash to prevent local authentication.
-
-- Add ``replica-files-in-sync-at``, ``replica-init-queue-finished-at`` and ``replica-metadata-in-sync-at`` to status view, the existing ``replica-in-sync-at`` is now a combination of all three instead of just metadata.
-
-- Warn when an unknown option is found in config file to detect typos. Be aware that some commands don't use all the options, that is why this only warns instead of exiting.
-
-- Add new ``devpiserver_user_created`` hook which can be used to create default indexes or other setup for newly created users.
-
-Bug Fixes
----------
-
-- Fix ``+status`` json encoding errors by making sure the ``FatalResponse.url`` attribute is a string.
-
-- Ignore existing unknown index options from uninstalled plugins when patching other options with ``+=`` and ``-=``.
-
-- Fix removal with ``-=`` of index options with default values from ``devpiserver_indexconfig_defaults`` hooks.
-
-- Fix #1110: a list for the ``listen`` option in a config file stopped working in 6.18.0.
-

devpi_server-6.20.0/devpi_server/__init__.py

@@ -1 +0,0 @@
-__version__ = "6.20.0"