Intention
I want to set up a workload outside of gitlab that downloads the source of the main branch of a project.
Approach
Generate a project access token and use that token to access the Download as zip link
Using the user interface, navigate to the project and find the link that downloads the repository as a zip file. In our case something like this:
https://gitlab.com/group/sub-group/project/-/archive/master/project-master.zip
Attempt to download it with curl and a personalized access token (e.g. a token bound to my user)
curl --header "PRIVATE-TOKEN: <<glpat-*****>>" https://gitlab.com/group/sub-group/project/-/archive/master/project-master.zip
Confirm that this works. Actually, confirming requires adding the -o option but that hides the ouput in the cli if it fails.
The Personal Access Token has read_api permissions and I am currently Developer on the project
Create a Project Access Token with read_api permission in Developer
Attempt with the same curl command, but use the Project Access Token instead of the Personal Access Token.
Observe a redirect to the SSO Login page
Expected behaviour
Project Access Tokens to work the same as Personal Access Token on project api endpoints