From 2f70440834ccf7a28876127a23f6bcde50ab8950 Mon Sep 17 00:00:00 2001
From: James Magahern <james@magahern.com>
Date: Sun, 12 Apr 2026 17:37:47 -0700
Subject: [PATCH] [gtk] fix packages auth

---
 .gitea/workflows/gtk-rpm-release.yaml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/gtk-rpm-release.yaml b/.gitea/workflows/gtk-rpm-release.yaml
index 93df1cb..1276f2a 100644
--- a/.gitea/workflows/gtk-rpm-release.yaml
+++ b/.gitea/workflows/gtk-rpm-release.yaml
@@ -100,16 +100,19 @@ jobs:
 
       - name: Upload RPMs to Gitea package registry
         env:
+          GITEA_ACTOR: ${{ gitea.actor }}
           GITEA_SERVER_URL: ${{ gitea.server_url }}
           GITEA_REPOSITORY: ${{ gitea.repository }}
           GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
           RPM_PACKAGE_GROUP: ${{ env.RPM_PACKAGE_GROUP }}
           RPM_PACKAGE_TOKEN: ${{ secrets.RPM_PACKAGE_TOKEN }}
+          RPM_PACKAGE_USERNAME: ${{ vars.RPM_PACKAGE_USERNAME }}
           RELEASE_ASSETS_DIR: ${{ env.RELEASE_ASSETS_DIR }}
         run: |
           set -eu
 
           owner="${GITEA_REPOSITORY%%/*}"
+          package_user="${RPM_PACKAGE_USERNAME:-${GITEA_ACTOR:-}}"
           token="${RPM_PACKAGE_TOKEN:-${GITEA_TOKEN:-}}"
           group="${RPM_PACKAGE_GROUP:-}"
 
@@ -118,6 +121,11 @@ jobs:
             exit 1
           fi
 
+          if [ -z "$package_user" ]; then
+            echo "Missing package upload username. Set RPM_PACKAGE_USERNAME or ensure gitea.actor is available." >&2
+            exit 1
+          fi
+
           if [ -z "$token" ]; then
             echo "Missing upload token. Set RPM_PACKAGE_TOKEN or ensure secrets.GITEA_TOKEN is available." >&2
             exit 1
@@ -144,7 +152,7 @@ jobs:
             http_code="$(curl --silent --show-error \
               --write-out '%{http_code}' \
               --output /tmp/package-upload-response \
-              --header "Authorization: token ${token}" \
+              --user "${package_user}:${token}" \
               --upload-file "$rpm" \
               "$upload_url")"