From 3a55daf7b6ec515e29984cad376edea1ff17ccfd Mon Sep 17 00:00:00 2001
From: Erik Larsson <erik.larsson@schibsted.com>
Date: Mon, 5 Jul 2021 23:03:36 +0200
Subject: [PATCH] Authorize scaffolder list actions request

Signed-off-by: Erik Larsson <erik.larsson@schibsted.com>
---
 plugins/scaffolder/src/api.ts | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/plugins/scaffolder/src/api.ts b/plugins/scaffolder/src/api.ts
index 85df77f2f5..37d78d0fda 100644
--- a/plugins/scaffolder/src/api.ts
+++ b/plugins/scaffolder/src/api.ts
@@ -245,7 +245,10 @@ export class ScaffolderClient implements ScaffolderApi {
    */
   async listActions(): Promise<ListActionsResponse> {
     const baseUrl = await this.discoveryApi.getBaseUrl('scaffolder');
-    const response = await fetch(`${baseUrl}/v2/actions`);
+    const token = await this.identityApi.getIdToken();
+    const response = await fetch(`${baseUrl}/v2/actions`, {
+      headers: token ? { Authorization: `Bearer ${token}` } : {},
+    });
 
     if (!response.ok) {
       throw ResponseError.fromResponse(response);