From 29e08220e4f7ad352e728cfb5fc8fcfe2f3188b8 Mon Sep 17 00:00:00 2001
From: Fedor Korotkov <fedor.korotkov@gmail.com>
Date: Thu, 5 May 2022 19:12:38 -0400
Subject: [PATCH] Get OCI credentials only when needed (#46)

So we don't even request them for a public image
---
 Sources/tart/OCI/Registry.swift | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/Sources/tart/OCI/Registry.swift b/Sources/tart/OCI/Registry.swift
index 0ba3cad..4a4abf5 100644
--- a/Sources/tart/OCI/Registry.swift
+++ b/Sources/tart/OCI/Registry.swift
@@ -14,8 +14,6 @@ struct TokenResponse: Decodable {
 class Registry {
   var baseURL: URL
   var namespace: String
-  var user: String
-  var password: String
 
   var token: String? = nil
 
@@ -27,7 +25,6 @@ class Registry {
 
     baseURL = baseURLComponents.url!
     self.namespace = namespace
-    (user, password) = try Credentials.retrieve(host: host)
   }
 
   func pushManifest(reference: String, config: Descriptor, layers: [OCIManifestLayer]) async throws -> String {
@@ -199,6 +196,7 @@ class Registry {
       }
     }
 
+    let (user, password) = try Credentials.retrieve(host: baseURL.host!)
     let encodedCredentials = "\(user):\(password)".data(using: .utf8)?.base64EncodedString()
     let headers = [
       "Authorization": "Basic \(encodedCredentials!)"