feat(indico-ingestor): API token auth

Author: kennethrioja

config/secrets.example.yml

@@ -38,6 +38,7 @@ external_api_keys: &external_api_keys
     password:
   gpt_api_key:
   willma_api_key:
+  indico_api_token:   # begins by 'indp_', cf. https://docs.getindico.io/en/stable/http-api/access/#api-token-authentication
 
 #Internal config
 development:

lib/ingestors/ical_ingestor.rb

@@ -19,6 +19,7 @@ def self.config
     end
 
     def read(source_url)
+      @token << Rails.application.config.secrets.indico_api_token
       @verbose = false
       sources = get_sources(source_url)
       return if sources.nil?
@@ -35,7 +36,8 @@ def read(source_url)
     # Note: One .ics file can have multiple Ical events.
     def process_url(url)
       export_url = to_export(url)
-      events = Icalendar::Event.parse(open_url(export_url, raise: true).set_encoding('utf-8'))
+      content = open_url(export_url, token: @token, raise: true).set_encoding('utf-8')
+      events = Icalendar::Event.parse(content)
       raise 'Not found' if events.nil? || events.empty?
 
       events.each do |e|

lib/ingestors/ingestor.rb

@@ -50,13 +50,14 @@ def stats_summary(type)
       summary
     end
 
-    def open_url(url, raise: false)
+    def open_url(url, token: '', raise: false)
       options = {
         redirect: false, # We're doing redirects manually below, since open-uri can't handle http -> https redirection
         read_timeout: 5
       }
       options[:ssl_verify_mode] = config[:ssl_verify_mode] if config.key?(:ssl_verify_mode)
       redirect_attempts = 5
+      options['Authorization'] = "Bearer #{token}" if token
       begin
         URI(url).open(options)
       rescue OpenURI::HTTPRedirect => e