Authentication

[delanym]

I set my URLs with

export PUB_HOSTED_URL=https://${ACCOUNT}:${PASSWORD}@nexus.somewhere.com/repository/pub.dev/
export FLUTTER_STORAGE_BASE_URL=https://${ACCOUNT}:${PASSWORD}@nexus.somewhere.com/repository/pub.dev/

When I run flutter pub run build_runner build --delete-conflicting-outputs
I get

Flutter assets will be downloaded from https://proxies:@nexus.somewhere.com/repository/pub.dev/. Make sure you trust this source!
Invalid PUB_HOSTED_URL="https://proxies:PRYZc3q9dZMvszqRBEYSih6iBlNsf@nexus.somewhere.com/repository/pub.dev/": user-info is not supported in url

[mat1e]

Hi, we are using this plugin without http authentication because it support only proxy repo for the moment and pub.dev is a public repository.

Can you provide an use case where an authentication is useful? Like this I can understand why this feature is needed.

[delanym]

We don't allow anonymous access to Nexus.
I tried following these instructions to allow anonymous access for only proxied repositories
https://support.sonatype.com/hc/en-us/articles/360050779593-How-to-grant-anonymous-access-to-a-specific-repository-
All of the repositories were exposed - the anonymous switch doesn't respect the roles applied to the anonymous user (at least, not to the anonymous user I recreated after deleting the default anonymous user)

I posted this issue here, but on further reflection I don't see how its up to the plugin. It seems to be a flutter issue. Do you agree?

[mat1e]

I just checked to connect directly with the url in my browser with private mode (no cache) and it is working. With anonymous access desactivated and passing username and password directly in url.
It seems to be a flutter issue like you suggested...

I found this documentation for PUB_HOSTED_URL but nothing for flutter...

[jonasfj]

disclaimer: I'm not entirely sure what "nexus-repository" is... but I just wanted to add:

I found this documentation for PUB_HOSTED_URL but nothing for flutter...

Dart SDK removed support for user-data in the URL last year. It has many bad side-effects, see notes in: dart-lang/site-www#3901

If you're creating a custom repository for Dart / pub, please read:

• https://dart.dev/tools/pub/custom-package-repositories
• https://github.com/dart-lang/pub/blob/master/doc/repository-spec-v2.md

Feel free open an issue on the pub repository (and ping me) if you have questions about the specification.

[mat1e]

@delanym, to restrict the access of the anonymous user, you must remove from the user the default roles "nx-anonymous" wich give read access to all repositories.
You can create a specific role for Dart Proxy repository and add it to anonymous user.