From b34181b3d8c6941c2d8f13f3e3fcea84af12e298 Mon Sep 17 00:00:00 2001
From: Chase Gladish <chase.gladish@gmail.com>
Date: Sat, 12 Nov 2022 23:37:16 -0800
Subject: [PATCH] Fix authorization for private downloads

---
 lib/routes.js | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/lib/routes.js b/lib/routes.js
index bbd6f14b..b31fc943 100644
--- a/lib/routes.js
+++ b/lib/routes.js
@@ -22,15 +22,14 @@ module.exports = ({ cache, config }) => {
   // Helpers
   const proxyPrivateDownload = (asset, req, res) => {
     const redirect = 'manual'
-    const headers = { Accept: 'application/octet-stream' }
+    const headers = {
+      Accept: 'application/octet-stream',
+      Authorization: `Bearer ${token}`
+    }
     const options = { headers, redirect }
-    const { api_url: rawUrl } = asset
-    const finalUrl = rawUrl.replace(
-      'https://api.github.com/',
-      `https://${token}@api.github.com/`
-    )
+    const { api_url: apiUrl } = asset
 
-    fetch(finalUrl, options).then(assetRes => {
+    fetch(apiUrl, options).then(assetRes => {
       res.setHeader('Location', assetRes.headers.get('Location'))
       send(res, 302)
     })