fix: token retrieval error when config is not setup

Author: JerrySentry

codecov_auth/authentication/repo_auth.py

@@ -9,7 +9,7 @@
 from django.utils import timezone
 from jwt import PyJWTError
 from rest_framework import authentication, exceptions, serializers
-from rest_framework.exceptions import NotAuthenticated
+from rest_framework.exceptions import NotAuthenticated, ValidationError
 from rest_framework.response import Response
 from rest_framework.views import exception_handler
 from shared.django_apps.codecov_auth.models import Owner
@@ -200,7 +200,7 @@ def authenticate(
         if not using_global_token:
             return None  # continue to next auth class
 
-        service = global_tokens[token]
+        service = global_tokens.get(token, "")
         upload_info = get_upload_info_from_request_path(request)
         if upload_info is None:
             return None  # continue to next auth class
@@ -257,7 +257,7 @@ def authenticate_credentials(
 
         try:
             repository = get_repo_with_github_actions_oidc_token(token)
-        except (ObjectDoesNotExist, PyJWTError):
+        except (ObjectDoesNotExist, PyJWTError, ValidationError):
             return None  # continue to next auth class
 
         log.info(

upload/helpers.py

@@ -243,6 +243,10 @@ def get_repo_with_github_actions_oidc_token(token: str) -> Repository:
     else:
         service = "github_enterprise"
         github_enterprise_url = get_config("github_enterprise", "url")
+        if not github_enterprise_url:
+            raise ValidationError(
+                "GitHub Enterprise URL configuration is not set configuration"
+            )
         # remove trailing slashes if present
         github_enterprise_url = re.sub(r"/+$", "", github_enterprise_url)
         jwks_url = f"{github_enterprise_url}/_services/token/.well-known/jwks"
@@ -525,7 +529,7 @@ def insert_commit(
     return commit
 
 
-def get_global_tokens() -> Dict[str, Any]:
+def get_global_tokens() -> Dict[str | None, Any]:
     """
     Enterprise only: check the config to see if global tokens were set for this organization's uploads.