feat: Update default to prefer API keys for channels that aren't configured with repo-token as default

Author: mattkram

src/anaconda_auth/_conda/auth_handler.py

@@ -53,13 +53,13 @@ def _load_token_domain(self, parsed_url: ParseResult) -> tuple[str, CredentialTy
 
         # Set defaults for behavior when not overridden by configuration
         token_domain = channel_domain
-        credential_type = CredentialType.REPO_TOKEN
+        credential_type = CredentialType.API_KEY
 
         # For specific channel domains, we override the defaults
         if channel_domain in TOKEN_DOMAIN_MAP:
             token_domain, credential_type, _ = TOKEN_DOMAIN_MAP[channel_domain]
         else:
-            token_domain, credential_type = channel_domain, CredentialType.REPO_TOKEN
+            token_domain, credential_type = channel_domain, CredentialType.API_KEY
 
         # Allow users to override default via configuration
         config = AnacondaAuthConfig(domain=token_domain)

tests/test_conda_plugins.py

@@ -343,3 +343,21 @@ def test_load_token_domain_anaconda_cloud_api_key(conda_search_path, monkeypatch
 
     assert token_domain == "anaconda.com"
     assert credential_type == CredentialType.API_KEY
+
+
+def test_load_token_domain_user_provided_default(conda_search_path):
+    channel_url = "https://some-domain.com/repo/some-channel"
+    condarc = CondaRC()
+    condarc.update_channel_settings(
+        channel=channel_url + "/*",
+        auth_type="anaconda-auth",
+    )
+    condarc.save()
+    context.reset_context()
+
+    handler = AnacondaAuthHandler(channel_name=channel_url)
+    url = channel_url + "/noarch/repodata.json"
+    token_domain, credential_type = handler._load_token_domain(parsed_url=urlparse(url))
+
+    assert token_domain == "some-domain.com"
+    assert credential_type == CredentialType.API_KEY