Support URLs with basic authentication when resolving a devfile

[l0rd]

Is your enhancement related to a problem? Please describe

There are git services for which Che cannot resolve the Devfile.

A workaround is to use the raw URL to the devfile. For example for azure devops the following public URL worked:

https://dev.azure.com/marioloriedo/a5c3e8ae-6db1-4a4f-8b81-0a8ef12f154b/_apis/git/repositories/317bf9fc-90a2-42d2-884a-2766575892e8/items?path=/.devfile.yaml&versionDescriptor%5BversionOptions%5D=0&versionDescriptor%5BversionType%5D=0&versionDescriptor%5Bversion%5D=main&resolveLfs=true&%24format=octetStream&api-version=5.0&download=true

For private repositories a developer could still use the same workaround but in this case he should include the personal access token in the URL. For example:

https://${PAT}@dev.azure.com/marioloriedo/marioloriedo/_apis/sourceProviders/TfsGit/filecontents?repository=private-repo&commitOrBranch=main&path=/.devfile.yaml&api-version=7.0

But the che-server fails to resolve the devfile in this case:

The same URL works fine with cURL:

Describe the solution you'd like

The che-server should be able to resolve the file.

Additional context

I have also tested with a github.com private repository and the message is different:

The URL used was:

https://[email protected]/<user or organization>/<repo name>/<branch>/.devfile.yaml

Che-server should resolve the file In this case too but it doesn't work.

[devstudio-release]

sync'd to Red Hat JIRA https://issues.redhat.com/browse/CRW-4106

• Support Basic authentication for devfile factory URL che-server#451
• Add info about starting a workspace from raw devfile location che-docs#2563
• Add info about starting a workspace from raw devfile location che-docs#2566

[netomi]

@l0rd you added an Azure DevOps Personal Access Token in one of your comments, I would highly suggest to revoke it if its still in use.

[l0rd]

Thank you @netomi. The PAT was revoked before I created the issue. But anyway I have updated the description to hide PAT to avoid any security alert.