Add ability to configure 'forceBasicAuth' for docker registries

plugins/nexus-script-plugin/src/main/java/org/sonatype/nexus/script/plugin/RepositoryApi.java

@@ -213,6 +213,27 @@ Repository createDockerHosted(final String name,
                                 final boolean strictContentTypeValidation,
                                 final WritePolicy writePolicy);
 
+  /**
+   * Create a Docker hosted repository.
+   * @param name The name of the new Repository
+   * @param httpPort The http port to accept traffic for this Repository on (optional)
+   * @param httpsPort The https port to accept traffic for this Repository on (optional)
+   * @param blobStoreName The BlobStore the Repository should use
+   * @param v1Enabled Whether or not this Repository supports Docker V1 format
+   * @param strictContentTypeValidation Whether or not the Repository should enforce strict content types
+   * @param writePolicy The {@link WritePolicy} for the Repository
+   * @param forceBasicAuth whether to force basic auth. False is required to enable token auth which can be used for anonymous access
+   * @return the newly created Repository
+   */
+  Repository createDockerHosted(final String name,
+                                Integer httpPort,
+                                Integer httpsPort,
+                                final String blobStoreName,
+                                final boolean v1Enabled,
+                                final boolean strictContentTypeValidation,
+                                final WritePolicy writePolicy,
+                                final boolean forceBasicAuth);
+
   /**
    * Create a Docker proxy repository.
    *

plugins/nexus-script-plugin/src/main/java/org/sonatype/nexus/script/plugin/internal/provisioning/RepositoryApiImpl.groovy

@@ -265,11 +265,12 @@ class RepositoryApiImpl
                                 final String blobStoreName = BlobStoreManager.DEFAULT_BLOBSTORE_NAME,
                                 final boolean strictContentTypeValidation = true,
                                 final boolean v1Enabled = true,
-                                final WritePolicy writePolicy = WritePolicy.ALLOW
+                                final WritePolicy writePolicy = WritePolicy.ALLOW,
+                                final boolean forceBasicAuth = true
   )
   {
     Configuration configuration = createHosted(name, 'docker-hosted', blobStoreName, writePolicy, strictContentTypeValidation)
-    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled)
+    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled, forceBasicAuth)
     createRepository(configuration)
   }
 
@@ -283,10 +284,11 @@ class RepositoryApiImpl
                                @Nullable Integer httpsPort,
                                final String blobStoreName = BlobStoreManager.DEFAULT_BLOBSTORE_NAME,
                                final boolean strictContentTypeValidation = true,
-                               final boolean v1Enabled = true)
+                               final boolean v1Enabled = true,
+                               final boolean forceBasicAuth = true)
   {
     Configuration configuration = createProxy(name, 'docker-proxy', remoteUrl, blobStoreName, strictContentTypeValidation)
-    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled)
+    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled, forceBasicAuth)
     configuration.attributes.dockerProxy = [
         indexType: indexType,
         indexUrl : indexUrl
@@ -301,10 +303,11 @@ class RepositoryApiImpl
                                @Nullable Integer httpsPort,
                                final List<String> members,
                                final boolean v1Enabled = true,
-                               final String blobStoreName = BlobStoreManager.DEFAULT_BLOBSTORE_NAME)
+                               final String blobStoreName = BlobStoreManager.DEFAULT_BLOBSTORE_NAME,
+                               final boolean forceBasicAuth = true)
   {
     Configuration configuration = createGroup(name, 'docker-group', blobStoreName, members as String[])
-    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled)
+    configuration.attributes.docker = configureDockerAttributes(httpPort, httpsPort, v1Enabled, forceBasicAuth)
     createRepository(configuration)
   }
 
@@ -422,7 +425,7 @@ class RepositoryApiImpl
     [versionPolicy: versionPolicy, layoutPolicy: layoutPolicy]
   }
 
-  private static Map configureDockerAttributes(Integer httpPort, Integer httpsPort, boolean v1Enabled) {
+  private static Map configureDockerAttributes(Integer httpPort, Integer httpsPort, boolean v1Enabled, boolean forceBasicAuth) {
     def docker = [:]
     if (httpPort) {
       docker.httpPort = httpPort
@@ -431,6 +434,7 @@ class RepositoryApiImpl
       docker.httpsPort = httpsPort
     }
     docker.v1Enabled = v1Enabled
+    docker.forceBasicAuth = forceBasicAuth
     return docker
   }