impl

Signed-off-by: Roman Nikitenko <rnikiten@redhat.com>

Author: RomanNikitenko

code/extensions/che-api/src/extension.ts

@@ -81,6 +81,14 @@ export async function activate(_extensionContext: vscode.ExtensionContext): Prom
 
     _extensionContext.subscriptions.push(
         vscode.commands.registerCommand('che-api.test-github-proxy', async () => {
+            const diag = [
+                `NODE_EXTRA_CA_CERTS=${process.env.NODE_EXTRA_CA_CERTS || '(not set)'}`,
+                `HTTPS_PROXY=${process.env.HTTPS_PROXY || '(not set)'}`,
+                `Node.js=${process.version}`,
+                `fetch patched=${'__vscodeOriginalFetch' in globalThis}`,
+            ];
+            console.log('test-github-proxy diagnostics:', diag.join(', '));
+
             try {
                 const user = await githubService.getUser();
                 vscode.window.showInformationMessage(`Success! GitHub user: ${user.login}`);
@@ -90,6 +98,7 @@ export async function activate(_extensionContext: vscode.ExtensionContext): Prom
                 const fullMessage = `Failed to get GitHub user: ${e.message}${cause}${code}`;
                 console.error('test-github-proxy error:', e);
                 console.error('test-github-proxy cause:', e.cause);
+                console.error('test-github-proxy diagnostics:', diag.join(', '));
                 vscode.window.showErrorMessage(fullMessage);
             }
         })

code/extensions/che-api/src/impl/github-service-impl.ts

@@ -10,6 +10,8 @@
 
 /* eslint-disable header/header */
 
+import * as http from 'http';
+import * as https from 'https';
 import * as k8s from '@kubernetes/client-node';
 import * as fs from 'fs-extra';
 import { inject, injectable } from 'inversify';
@@ -67,6 +69,14 @@ export class GithubServiceImpl implements GithubService {
   }
 
   private async fetchGithubUser(token: string): Promise<{ user: GithubUser; scopes: string[] }> {
+    try {
+      return await this.fetchGithubUserWithFetch(token);
+    } catch {
+      return await this.fetchGithubUserWithHttps(token);
+    }
+  }
+
+  private async fetchGithubUserWithFetch(token: string): Promise<{ user: GithubUser; scopes: string[] }> {
     const response = await fetch('https://api.github.com/user', {
       headers: { Authorization: `Bearer ${token}` },
     });
@@ -83,6 +93,46 @@ export class GithubServiceImpl implements GithubService {
     return { user, scopes };
   }
 
+  private fetchGithubUserWithHttps(token: string): Promise<{ user: GithubUser; scopes: string[] }> {
+    const url = 'https://api.github.com/user';
+    return new Promise((resolve, reject) => {
+      const module = url.startsWith('https:') ? https : http;
+      const req = module.request(url, {
+        method: 'GET',
+        headers: {
+          'Authorization': `Bearer ${token}`,
+          'User-Agent': 'che-code',
+          'Accept': 'application/json',
+        },
+      }, (res) => {
+        const chunks: Buffer[] = [];
+        res.on('data', (chunk: Buffer) => chunks.push(chunk));
+        res.on('end', () => {
+          const body = Buffer.concat(chunks).toString();
+          if (!res.statusCode || res.statusCode < 200 || res.statusCode >= 300) {
+            reject(new Error(`GitHub user request failed: ${res.statusCode} ${res.statusMessage} - ${body}`));
+            return;
+          }
+          try {
+            const user = JSON.parse(body) as GithubUser;
+            const scopesHeader = res.headers['x-oauth-scopes'] ?? '';
+            const scopes = (Array.isArray(scopesHeader) ? scopesHeader[0] : scopesHeader)
+              .split(', ')
+              .map(scope => scope.trim())
+              .filter(scope => scope.length > 0);
+            resolve({ user, scopes });
+          } catch (err) {
+            reject(err);
+          }
+        });
+        res.on('error', reject);
+      });
+      req.setTimeout(60 * 1000);
+      req.on('error', reject);
+      req.end();
+    });
+  }
+
   async persistDeviceAuthToken(token: string): Promise<void> {
     this.token = token;
     this.logger.info(`Github Service: adding token to the device-authentication secret...`);