From caf51f5750a862a31bc1b83974ef4acca5a3acf5 Mon Sep 17 00:00:00 2001
From: Jens Meisner <jmeisner@coremedia.com>
Date: Tue, 22 Sep 2026 08:13:36 +0200
Subject: [PATCH] workflows throw error when Nexus auth fails

---
 .github/workflows/pre-release-gc.yml | 4 ++++
 .github/workflows/pre-release.yml    | 4 ++++
 .github/workflows/release.yml        | 4 ++++
 .github/workflows/unpublish.yml      | 4 ++++
 4 files changed, 16 insertions(+)

diff --git a/.github/workflows/pre-release-gc.yml b/.github/workflows/pre-release-gc.yml
index f022165728..d2294cf321 100644
--- a/.github/workflows/pre-release-gc.yml
+++ b/.github/workflows/pre-release-gc.yml
@@ -52,6 +52,10 @@ jobs:
             --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' \
             "${{ env.NPM_REPOSITORY_URL }}/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }}" | \
             jq -r .token)
+          if [ -z "$NPM_AUTH_TOKEN" ] || [ "$NPM_AUTH_TOKEN" = "null" ]; then
+            echo "::error::Nexus auth exchange returned no token. Check PLUGINS_NEXUS_USER/PLUGINS_NEXUS_PASSWORD secrets and Nexus availability."
+            exit 1
+          fi
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "PNPM_CONFIG_//${{ env.NPM_REPOSITORY }}/:_authToken=${NPM_AUTH_TOKEN}" >> $GITHUB_ENV
           echo "NPM_AUTH_TOKEN=${NPM_AUTH_TOKEN}" >> $GITHUB_ENV
diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
index 874039df26..2d6404889f 100644
--- a/.github/workflows/pre-release.yml
+++ b/.github/workflows/pre-release.yml
@@ -48,6 +48,10 @@ jobs:
       - name: Configure NPM
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
+          if [ -z "$NPM_AUTH_TOKEN" ] || [ "$NPM_AUTH_TOKEN" = "null" ]; then
+            echo "::error::Nexus auth exchange returned no token. Check PLUGINS_NEXUS_USER/PLUGINS_NEXUS_PASSWORD secrets and Nexus availability."
+            exit 1
+          fi
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
           echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b87c3b6c2a..16076595ff 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -67,6 +67,10 @@ jobs:
       - name: Configure NPM
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
+          if [ -z "$NPM_AUTH_TOKEN" ] || [ "$NPM_AUTH_TOKEN" = "null" ]; then
+            echo "::error::Nexus auth exchange returned no token. Check PLUGINS_NEXUS_USER/PLUGINS_NEXUS_PASSWORD secrets and Nexus availability."
+            exit 1
+          fi
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
           echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
diff --git a/.github/workflows/unpublish.yml b/.github/workflows/unpublish.yml
index ff36e5aacb..ffc709b183 100644
--- a/.github/workflows/unpublish.yml
+++ b/.github/workflows/unpublish.yml
@@ -15,6 +15,10 @@ jobs:
       - name: Resolve NPM_AUTH_TOKEN
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
+          if [ -z "$NPM_AUTH_TOKEN" ] || [ "$NPM_AUTH_TOKEN" = "null" ]; then
+            echo "::error::Nexus auth exchange returned no token. Check PLUGINS_NEXUS_USER/PLUGINS_NEXUS_PASSWORD secrets and Nexus availability."
+            exit 1
+          fi
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV