Re: [Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-05 Thread Xinyi
Apologies for the typo in my original email. I meant “quiet=1” and it was working. The log was typed but not copied so that was why there was a typo. But as stated in the reasoning - it hides all the output, so also other useful information like where the lib is installed, compile details etc.

Re: [Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-05 Thread Martin Maechler
> Simon Urbanek > on Sun, 4 Feb 2024 10:33:34 +1300 writes: > Any reason why you didn't use quiet=TRUE to suppress that > output? He wrote 'quite' instead of 'quiet' {see cited below '1. quite=1'} and probably never tried the correct spelling ... > There is no

Re: [Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-04 Thread Kevin Ushey
For cases like these, I think it would be more useful to have some mechanism for associating URLs / hosts with credentials, and have R use those credentials by default whenever accessing those URLs. Since download.file() now supports custom headers, this could be a mechanism for setting headers to

Re: [Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-03 Thread Simon Urbanek
Any reason why you didn't use quiet=TRUE to suppress that output? There is no official API structure for credentials in R repositories, so R has no way of knowing which part of the URL are credentials as it is not under R's purview - it could be part of the path or anything, so there is no way

Re: [Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-01 Thread Duncan Murdoch
I've just been reading https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication, and it states that putting userid:password in the URL is deprecated, but it does make sense that R should protect users who still use that scheme. Duncan Murdoch On 01/02/2024 11:28 a.m., Xinyi wrote:

[Rd] [Feature Request] Hide API Key in download.file() / R's libcurl

2024-02-01 Thread Xinyi
Hi all, When trying to install a package from R using install.packages(), it will print out the full url address (of the remote repository) it was trying to access. A bit further digging shows it is from the in_do_curlDownload method from R's libcurl