Disable credentials handling for insecure repositories

ssuurlresolver/ssuurlresolver.cpp

@@ -104,6 +104,11 @@ void SsuUrlResolver::run(){
   } else
     ssuLog->print(LOG_DEBUG, "Device not registered -- skipping credential update");
 
+  // resolve base url
+  resolvedUrl = ssu.repoUrl(repo, isRnd, repoParameters);
+
+  // only do credentials magic on secure connections
+  if (resolvedUrl.startsWith("https://")){
     // TODO: check for credentials scope required for repository; check if the file exists;
     //       compare with configuration, and dump credentials to file if necessary
     ssuLog->print(LOG_DEBUG, QString("Requesting credentials for '%1' with RND status %2...").arg(repo).arg(isRnd));
@@ -118,12 +123,12 @@ void SsuUrlResolver::run(){
       }
     } else
       ssuLog->print(LOG_DEBUG, "Skipping credential update due to missing credentials scope");
+  }
 
-  if (headerList.isEmpty()){
-    resolvedUrl = ssu.repoUrl(repo, isRnd, repoParameters);
-  } else {
+
+  if (!headerList.isEmpty()){
     resolvedUrl = QString("%1?%2")
-      .arg(ssu.repoUrl(repo, isRnd, repoParameters))
+      .arg(resolvedUrl)
       .arg(headerList.join("&"));
   }