X switch to /archive/... for quering auth backend

blob.go

@@ -167,11 +167,15 @@ func askAuthBackend(u *upstream, project string) AuthReply {
 		RawReply: httptest.NewRecorder(),
 	}
 
-	// Request to auth backend to verify whether download is possible via
-	// asking as `git fetch` would do.
+	// Request to auth backend to verify whether download is possible.
+	// - first option is via asking as `git fetch` would do, but on Rails
+	//   side this supports only basic auth, not private token.
+	// - that's why we auth backend to authenticate as if it is request to
+	//   get repo archive XXX
 	// XXX private_token not propagated, etc ...
-	// XXX PRIVATE-TOKEN (if header)
-	reqDownloadAccess, err := http.NewRequest("GET", project+".git/info/refs?service=git-upload-pack", nil)
+	// XXX PRIVATE-TOKEN (in header)
+	//reqDownloadAccess, err := http.NewRequest("GET", project+".git/info/refs?service=git-upload-pack", nil)
+	reqDownloadAccess, err := http.NewRequest("GET", project+"/repository/archive.zip", nil)
 	if err != nil {
 		fail500(authReply.RawReply, "GET git-upload-pack", err)
 		return authReply