Switch _safe_fetch and StepCatalog._fetch_single_catalog to use open_url for auth consistency

Author: Copilot

src/specify_cli/__init__.py

@@ -6006,7 +6006,7 @@ def workflow_step_add(
             raise typer.Exit(1)
 
     from urllib.parse import urlparse
-    from urllib.request import urlopen
+    from specify_cli.authentication.http import open_url as _open_url
 
     def _safe_fetch(url: str) -> bytes:
         parsed = urlparse(url)
@@ -6015,7 +6015,7 @@ def _safe_fetch(url: str) -> bytes:
             raise ValueError(f"Refusing to fetch from non-HTTPS URL: {url}")
         if not parsed.hostname:
             raise ValueError(f"Refusing to fetch from URL with no hostname: {url}")
-        with urlopen(url, timeout=30) as resp:  # noqa: S310
+        with _open_url(url, timeout=30) as resp:
             final_url = resp.geturl()
             final_parsed = urlparse(final_url)
             final_is_localhost = final_parsed.hostname in ("localhost", "127.0.0.1", "::1")

src/specify_cli/workflows/catalog.py

@@ -858,7 +858,7 @@ def _fetch_single_catalog(
                 pass
 
         from urllib.parse import urlparse
-        from urllib.request import urlopen
+        from specify_cli.authentication.http import open_url as _open_url
 
         def _validate_url(url: str) -> None:
             parsed = urlparse(url)
@@ -877,7 +877,7 @@ def _validate_url(url: str) -> None:
         _validate_url(entry.url)
 
         try:
-            with urlopen(entry.url, timeout=30) as resp:  # noqa: S310
+            with _open_url(entry.url, timeout=30) as resp:
                 _validate_url(resp.geturl())
                 data = json.loads(resp.read().decode("utf-8"))
         except Exception as exc: