Authentication maven privat repo about kira-dependencies

[sobolevn]

Can you try to set type to maven_repository?
https://github.com/dependabot/dependabot-core/blob/master/maven/lib/dependabot/maven/update_checker/version_finder.rb#L214

[dperepust]

After changed to maven_repository
catch error
dependencies-bot/vendor/ruby/2.6.0/gems/dependabot-maven-0.108.25/lib/dependabot/maven/update_checker/version_finder.rb:217:in `fetch': key not found: "url"

then

added in JSON "url":"https://xxxxxxx.xx/api" and "url":"https://xxxxx.xxxx" - but steel catch error

/home/gitlab-runner/builds/xxxxx/0/xxxxxx/dependencies-bot/vendor/ruby/2.6.0/gems/dependabot-maven-0.108.25/lib/dependabot/maven/update_checker/version_finder.rb:62:in `versions': The following source could not be reached as it requires authentication (and any provided details were invalid or lacked the required permissions): https://xxxxxxx.xxx/artifactory/hyperjet-release (Dependabot::PrivateSourceAuthenticationFailure)

after search in souce code I found in

https://github.com/dependabot/dependabot-core/blob/master/maven/lib/dependabot/maven/metadata_finder.rb

    token = cred.fetch("username") + ":" + cred.fetch("password")
    encoded_token = Base64.encode64(token).delete("\n")
    { "Authorization" => "Basic #{encoded_token}" }

as i understand for access to maven repo, dependabot try use request header
"Authorization" => "Basic #{encoded_token}"

But in artifactory docs
https://www.jfrog.com/confluence/display/RTF/Artifactory+REST+API
for use token should be
curl -H "Authorization: Bearer " -X PUT - without user
and
curl -u myUser: -X PUT - without Authorization
Sorry, maybe I wrong

[dperepust]

Maybe U have example how can access to private maven repo (artifactory)
Thanks