Fix JENKINS-67807: Use system level access to fetch the access token (#…

…61)
jenkinsci · Oct 11, 2022 · 2643a56 · 2643a56
1 parent c2612a7
commit 2643a56
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/src/main/java/org/jenkinsci/plugin/gitea/GiteaSCMFileSystem.java b/src/main/java/org/jenkinsci/plugin/gitea/GiteaSCMFileSystem.java
@@ -31,18 +31,20 @@
 import edu.umd.cs.findbugs.annotations.NonNull;
 import hudson.Extension;
 import hudson.model.Item;
+import hudson.model.Queue.Task;
 import hudson.scm.SCM;
 import hudson.scm.SCMDescriptor;
+import hudson.security.ACL;
 import java.io.IOException;
 import jenkins.authentication.tokens.api.AuthenticationTokens;
-import jenkins.model.Jenkins;
 import jenkins.scm.api.SCMFile;
 import jenkins.scm.api.SCMFileSystem;
 import jenkins.scm.api.SCMHead;
 import jenkins.scm.api.SCMRevision;
 import jenkins.scm.api.SCMSource;
 import jenkins.scm.api.SCMSourceDescriptor;
 import jenkins.scm.api.SCMSourceOwner;
+import org.acegisecurity.Authentication;
 import org.apache.commons.lang.StringUtils;
 import org.jenkinsci.plugin.gitea.client.api.Gitea;
 import org.jenkinsci.plugin.gitea.client.api.GiteaAuth;
@@ -146,20 +148,24 @@ public SCMFileSystem build(@NonNull SCMSource source, @NonNull SCMHead head, @Ch
             SCMSourceOwner owner = source.getOwner();
             String serverUrl = src.getServerUrl();
             String credentialsId = src.getCredentialsId();
-            StandardCredentials credentials = StringUtils.isBlank(credentialsId)
-                    ? null
-                    : CredentialsMatchers.firstOrNull(
+            StandardCredentials credentials = null;
+            if (!StringUtils.isBlank(credentialsId)) {
+                Authentication authentication = owner instanceof Task
+                    ? ((Task) owner).getDefaultAuthentication()
+                    : ACL.SYSTEM;
+                credentials = CredentialsMatchers.firstOrNull(
                     CredentialsProvider.lookupCredentials(
                             StandardCredentials.class,
                             owner,
-                            Jenkins.getAuthentication(),
+                            authentication,
                             URIRequirementBuilder.fromUri(serverUrl).build()
                     ),
                     CredentialsMatchers.allOf(
                             AuthenticationTokens.matcher(GiteaAuth.class),
                             CredentialsMatchers.withId(credentialsId)
                     )
-            );
+                );
+            }
             if (owner != null) {
                 CredentialsProvider.track(owner, credentials);
             }