Merge pull request #183 from Meallia/Meallia-patch-1

Don't add an Authorization header is there is no token

Author: vsoch

CHANGELOG.md

@@ -14,6 +14,7 @@ and **Merged pull requests**. Critical items to know are:
 The versions coincide with releases on pip. Only major versions will be released as tags on Github.
 
 ## [0.0.x](https://github.com/oras-project/oras-py/tree/main) (0.0.x)
+ - don't add an Authorization header is there is no token (0.2.27), closes issue [182](https://github.com/oras-project/oras-py/issues/182)
  - check for blob existence before uploading (0.2.26)
    - fix get_tags for ECR when limit is None, closes issue [173](https://github.com/oras-project/oras-py/issues/173)
    - fix empty token for anon tokens to work, closes issue [167](https://github.com/oras-project/oras-py/issues/167)

oras/auth/token.py

@@ -32,7 +32,9 @@ def set_token_auth(self, token: str):
         self.token = token
 
     def get_auth_header(self):
-        return {"Authorization": "Bearer %s" % self.token}
+        if self.token:
+            return {"Authorization": "Bearer %s" % self.token}
+        return {}
 
     def reset_basic_auth(self):
         """

oras/version.py

@@ -2,7 +2,7 @@
 __copyright__ = "Copyright The ORAS Authors."
 __license__ = "Apache-2.0"
 
-__version__ = "0.2.26"
+__version__ = "0.2.27"
 AUTHOR = "Vanessa Sochat"
 EMAIL = "vsoch@users.noreply.github.com"
 NAME = "oras"