Use Authorization header instead of deprecated access_token query param, fixes #8454

5 years ago · 4b6c25d4bc
parent c3d3d45903
commit 4b6c25d4bc
1 changed files with 1 additions and 1 deletions
--- a/src/Composer/Util/RemoteFilesystem.php
+++ b/src/Composer/Util/RemoteFilesystem.php
@ -278,7 +278,7 @@ class RemoteFilesystem
        if (isset($options['github-token'])) {
            // only add the access_token if it is actually a github URL (in case we were redirected to S3)
            if (preg_match('{^https?://([a-z0-9-]+\.)*github\.com/}', $fileUrl)) {
-                $fileUrl .= (false === strpos($fileUrl, '?') ? '?' : '&') . 'access_token='.$options['github-token'];
+                $options['http']['header'][] = 'Authorization: token '.$options['github-token'];
            }
            unset($options['github-token']);
        }