mirror of
https://github.com/galaxyproject/galaxy.git
synced 2026-09-01 05:31:04 +08:00
mvdbeek
349ad23084
Every job currently serializes every configured and user-defined file source into JobIO. Resolving those configurations can read vault secrets and mint OAuth access tokens, so unrelated jobs can contact every OAuth provider available to a user. Derive the required URIs at dispatch from persisted tool inputs, action-owned request data, and deferred input dataset origins. Directory URI parameters are collected generically, while tool actions report URLs embedded in data-fetch requests, legacy upload paramfiles, and history-import archive parameters. Keep the legacy upload paramfile path stable across job preparation and retries. This avoids duplicating execution metadata in new private job parameters. Serialize only the highest-scoring configured source for each URI and only the user sources addressed by gxuserfiles UUIDs. Filtering happens before user source properties are resolved, preventing credential work for unrelated sources while preserving the complete configuration needed by external runners. Addresses #17811.