From 738f5f6d6546c8b886a72a9a0c4e3d7ece7ba431 Mon Sep 17 00:00:00 2001
From: Etienne Tremel <etienne@kogusenn.com>
Date: Tue, 30 Jun 2020 20:52:45 +0200
Subject: [PATCH] fix: remove authorization header from core.windows.net
 requests for Azure docker registries

---
 lib/util/http/index.ts | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/util/http/index.ts b/lib/util/http/index.ts
index c140432f724c77..3056bc68211bc8 100644
--- a/lib/util/http/index.ts
+++ b/lib/util/http/index.ts
@@ -95,6 +95,13 @@ export class Http<GetOptions = HttpOptions, PostOptions = HttpPostOptions> {
             delete opts.headers.authorization; // eslint-disable-line no-param-reassign
             delete opts.auth; // eslint-disable-line no-param-reassign
           }
+
+          if (opts.href?.includes('blob.core.windows.net')) {
+            // docker registry is hosted on Azure blob, redirect url includes authentication.
+            // eslint-disable-next-line no-param-reassign
+            delete opts.headers.authorization; // eslint-disable-line no-param-reassign
+            delete opts.auth; // eslint-disable-line no-param-reassign
+          }
         },
       ],
     };