[image-builder-bob] Force refresh of oauth token

[aledbf]

Description

Borrow code from the soci-snapshotter to force the refresh of the oauth token.

xref ENG-757
xref #18611

Summary generated by Copilot

🤖 Generated by Copilot at ca99984

Workaround a bug in docker authorizer that prevents token refresh for private registries. Modify proxy.go to duplicate registry responses and add a TODO comment.

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - aledbf-retry
• 🔗 URL - aledbf-retry.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - aledbf-retry-gha.16170
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=workspace
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[kylos101]

Awesome, nice find, @aledbf !

Dismissing so we can address feedback

[kylos101]

@aledbf one last question.

Separate from the StatusUnauthorized change you made, what do you think of adding the below?

		if resp.StatusCode == http.StatusBadRequest {
			log.WithField("URL", resp.Request.URL.String()).Warn("bad request")
			time.Sleep(2 * time.Second) // wait for the provider
			return true, nil
		}

My thought is, this is what the user essentially did (retry), so why not have proxy automate retry on 400, too.

[aledbf]

@aledbf one last question.

Separate from the StatusUnauthorized change you made, what do you think of adding the below?

		if resp.StatusCode == http.StatusBadRequest {
			log.WithField("URL", resp.Request.URL.String()).Warn("bad request")
			time.Sleep(2 * time.Second) // wait for the provider
			return true, nil
		}

My thought is, this is what the user essentially did (retry), so why not have proxy automate retry on 400, too.

I want to address token expiration in the PR.

[kylos101]

👍 👍