hgweb: do not ignore [auth] if url has a username (issue2822) The [auth] section was ignored when handling URLs like: http://user@example.com/foo Instead, we look in [auth] for an entry matching the URL and supplied user name. Entries without username can match URL with a username. Prefix length ties are resolved in favor of entries matching the username. With: foo.prefix = http://example.org foo.username = user foo.password = password bar.prefix = http://example.org/bar and the input URL: http://user@example.org/bar the 'bar' entry will be selected because of prefix length, therefore prompting for a password. This behaviour ensure that entries selection is consistent when looking for credentials or for certificates, and that certificates can be picked even if their entries do no define usernames while the URL does. Additionally, entries without a username matched against a username are returned as if they did have requested username set to avoid prompting again for a username if the password is not set. v2: reparse the URL in readauthforuri() to handle HTTP and HTTPS similarly. v3: allow unset usernames to match URL usernames to pick certificates. Resolve prefix length ties in favor of entries with usernames.

     1

  $ hg init

     2

  $ touch unknown

     3

     4

  $ touch a

     5

  $ hg add a

     6

  $ hg ci -m "1"

     7

     8

  $ touch b

     9

  $ hg add b

    10

  $ hg ci -m "2"

    11

    12

Should show unknown

    13

    14

  $ hg status

    15

  ? unknown

    16

  $ hg revert -r 0 --all

    17

  removing b

    18

    19

Should show unknown and b removed

    20

    21

  $ hg status

    22

  R b

    23

  ? unknown

    24

    25

Should show a and unknown

    26

    27

  $ ls

    28

  a

    29

  unknown