netrc authentication

python-gitlab reads credentials from ``.netrc`` files via the ``requests`` backend by default,

which may override authentication headers you set on your client.

python-gitlab reads credentials from ``.netrc`` files via the ``requests`` backend

only if you do not provide any other type of authentication yourself.

For more granular control, you candisable this `Using a custom session`_

and explicitlysetting ``trust_env=False`` as described in the ``requests`` documentation.

If you'd like to disable reading netrc files altogether, you canfollow `Using a custom session`_

and explicitlyset ``trust_env=False`` as described in the ``requests`` documentation.

..code-block::python

fromgitlab._backendsimportJobTokenAuth,OAuthTokenAuth,PrivateTokenAuth

fromgitlab.configimportGitlabConfigParser

defnetrc(monkeypatch:pytest.MonkeyPatch,tmp_path:pathlib.Path):

netrc_file.write_text("machine localhost login test password test")

monkeypatch.setenv("NETRC",str(netrc_file))

deftest_invalid_auth_args():

withpytest.raises(ValueError):

Gitlab(

assert"JOB-TOKEN"notinp.headers

deftest_with_no_auth_uses_netrc_file(netrc):

responses.get(

url="http://localhost/api/v4/test",

match=[

responses.matchers.header_matcher({"Authorization":"Basic dGVzdDp0ZXN0"})

],

)

gl=Gitlab("http://localhost")

gl.http_get("/test")

deftest_with_auth_ignores_netrc_file(netrc):

responses.get(

url="http://localhost/api/v4/test",

match=[responses.matchers.header_matcher({"Authorization":"Bearer test"})],

)

gl=Gitlab("http://localhost",oauth_token="test")

gl.http_get("/test")