Merge pull request #2 from eclipse-score/lt_qnx_credentials_helper

Add credential helper for QNX

Author: ltekieli

Diff for: README.md

@@ -40,3 +40,28 @@ The archive of this directory is the input for the toolchain_qcc extension.
 
 It is currently assumed that the license is deployed to ```/opt/score_qnx/license/licenses```.
 By default QNX tooling installs the license in ```~/.qnx/license/licenses```.
+
+## Using pre-packaged QNX 8.0 SDP
+
+Pre-packaged SDP requires authentication with ones QNX login and password.
+For this the ```tools/qnx_credential_helper.py``` needs to be used.
+
+The credential helper is a standalone application and cannot be referenced as Bazel target.
+For this the credential helper needs to be put:
+
+- as an absolute path:
+```
+common --credential_helper=*.qnx.com=/path/to/qnx_credential_helper.py
+```
+
+- in $PATH and referenced as:
+```
+common --credential_helper=*.qnx.com=qnx_credential_helper.py
+```
+
+- in your module source and referenced as:
+```
+common --credential_helper=*.qnx.com=%worksapce%/path/to/qnx_credential_helper.py
+```
+
+The credentials are taken from .netrc or from enviroment variables ```SCORE_QNX_LOGIN``` and ```SCORE_QNX_PASSWORD```.

Diff for: extensions.bzl

@@ -22,12 +22,14 @@ def _impl(mctx):
             name = sdp.name
             url = sdp.url
             sha256 = sdp.sha256
+            strip_prefix = sdp.strip_prefix
 
             http_archive(
                 name = "%s_sdp" % name,
                 urls = [url],
                 build_file = "@score_toolchains_qnx//toolchain:sdp.BUILD",
                 sha256 = sha256,
+                strip_prefix = strip_prefix,
             )
 
             qnx_toolchain(
@@ -42,6 +44,7 @@ toolchain_qcc = module_extension(
             attrs = {
                 "name": attr.string(default = "toolchain_qcc"),
                 "url": attr.string(mandatory = True),
+                "strip_prefix": attr.string(default = ""),
                 "sha256": attr.string(mandatory = True),
             },
         ),

Diff for: tests/MODULE.bazel

@@ -24,8 +24,9 @@ local_path_override(
 
 toolchain_qcc = use_extension("@score_toolchains_qnx//:extensions.bzl", "toolchain_qcc")
 toolchain_qcc.sdp(
-    sha256 = "559d40a5c9306d091bff43fc3ef169650d2579838829c3b039ad4d60dc507598",
-    url = "file:///opt/score_qnx/qnx800.tar.gz",
+    sha256 = "f2e0cb21c6baddbcb65f6a70610ce498e7685de8ea2e0f1648f01b327f6bac63",
+    url = "https://www.qnx.com/download/download/79858/installation.tgz",
+    strip_prefix = "installation",
 )
 use_repo(toolchain_qcc, "toolchain_qcc_sdp")
 use_repo(toolchain_qcc, "toolchain_qcc")

Diff for: tools/qnx_credential_helper.py

@@ -0,0 +1,79 @@
+#!/usr/bin/env python3
+
+# *******************************************************************************
+# Copyright (c) 2025 Contributors to the Eclipse Foundation
+#
+# See the NOTICE file(s) distributed with this work for additional
+# information regarding copyright ownership.
+#
+# This program and the accompanying materials are made available under the
+# terms of the Apache License Version 2.0 which is available at
+# https://www.apache.org/licenses/LICENSE-2.0
+#
+# SPDX-License-Identifier: Apache-2.0
+# *******************************************************************************
+
+import http.cookiejar
+import json
+import netrc
+import os
+import sys
+import urllib.parse
+import urllib.request
+
+
+def eprint(*args, **kwargs):
+    print(*args, file=sys.stderr, **kwargs)
+
+
+if __name__ == "__main__":
+    data = json.load(sys.stdin)
+
+    if "qnx.com" not in data["uri"]:
+        eprint("Unsupported domain")
+        sys.exit(1)
+
+    if "SCORE_QNX_LOGIN" in os.environ and "SCORE_QNX_PASSWORD" in os.environ:
+        login = os.environ["SCORE_QNX_LOGIN"]
+        password = os.environ["SCORE_QNX_PASSWORD"]
+    else:
+        try:
+            nrc = netrc.netrc()
+            auth = nrc.authenticators("qnx.com")
+            if auth:
+                login, _, password = auth
+            else:
+                raise Exception("No credential found for QNX")
+        except Exception as excp:
+            eprint(excp)
+            eprint("Failed getting credentials from .netrc")
+            sys.exit(1)
+
+    data = urllib.parse.urlencode({
+        "userlogin": login,
+        "password": password,
+        "UseCookie": "1"
+    })
+    data = data.encode("ascii")
+
+    cookie_jar = http.cookiejar.CookieJar()
+    cookie_processor = urllib.request.HTTPCookieProcessor(cookie_jar)
+    opener = urllib.request.build_opener(cookie_processor)
+    urllib.request.install_opener(opener)
+
+    r = urllib.request.urlopen("https://www.qnx.com/account/login.html", data)
+    if r.status != 200:
+        eprint("Failed to login to QNX")
+        sys.exit(1)
+
+    cookies = {c.name: c.value for c in list(cookie_jar)}
+    if not "myQNX" in cookies:
+        eprint("Failed to get myQNX cookie from login page")
+        sys.exit(1)
+
+    myQNX = cookies["myQNX"]
+    print(json.dumps({
+        "headers": {
+            "Cookie": [f"myQNX={myQNX}"],
+        }
+    }))