opencontainers / distribution-spec

OCI Distribution Specification
https://opencontainers.org
Apache License 2.0
792 stars 199 forks source link

Add 307 as valid response for pulling blobs #398

Closed sajayantony closed 1 year ago

sajayantony commented 1 year ago

Fixes #397

jdolitsky commented 1 year ago

does this affect conformance tests at all, or are redirects simply followed? (i think they are)

sudo-bmitch commented 1 year ago

Redirects are followed automatically in Go (https://pkg.go.dev/net/http#Client). Does this need to be more generic than just on a blob GET, i.e. a statement at the top indicating http redirect status codes should be supported by clients according to https://www.rfc-editor.org/rfc/rfc7231#section-6.4

jdolitsky commented 1 year ago

Does this need to be more generic than just on a blob GET

That would seem to cover all bases here

mikebrow commented 1 year ago

hmm.. adding redirects to the spec probably requires further consideration.

Was there any progress on creating a WG for auth?

tianon commented 1 year ago

Was there any progress on creating a WG for auth?

https://github.com/opencontainers/tob/pull/119

sajayantony commented 1 year ago

Closing this PR for now but will consider bringing up the issue during the call. Currently multiple clients already follow redirects but seems like this is intermingled with auth.