feat(core): unified HTTP auth provider + custom headers + CVP fix

[JusterZhu]

Summary

Unify HTTP authentication across all request paths (Verification + Report), add custom headers support to UpdateConfiguration, and fix CVP cross-version decision logic in GeneralSpacestation.

Changes (GeneralUpdate.Core library)

HttpClientProvider

• Add DefaultAuthProvider property — single source of truth for global auth
• Add ExtraHeaders ConcurrentDictionary — attach custom headers (e.g. X-Tenant-Id) to every request without writing a custom IHttpAuthProvider
• Add ApplyAuthAsync() — applies both the auth provider and extra headers

VersionService

• _globalAuthProvider → delegates to HttpClientProvider.DefaultAuthProvider
• Rename fields for clarity: _auth→_authProvider, _maxRetries→_maxRetryAttempts, IsRetryable→ShouldRetry
• Rename constructor parameters: auth→authProvider, timeout→requestTimeout, maxRetries→maxRetryAttempts

HttpUpdateReporter

• Use HttpClientProvider.Shared instead of new HttpClient()
• Apply global auth provider before sending via HttpClientProvider.ApplyAuthAsync()

AbstractBootstrap

• Add HttpAuth(IHttpAuthProvider instance) overload — allows registering providers with constructor parameters

UpdateConfiguration

• Add CustomHeaders dictionary — set custom HTTP headers via config, synced to HttpClientProvider.ExtraHeaders in SetConfig()

Changes (GeneralSpacestation server)

UpgradeService.BuildUnifiedResponseAsync

• Remove Version == lastVersion hard constraint on CVP matching
• Now accepts any CVP whose FromVersion == clientVersion with valid archive hashes, preferring the highest target version
• Client SDK (DownloadPlanBuilder) handles CVP + chain mixed path

Changes (test)

ClientTest

• Use SetConfig(UpdateRequest { CustomHeaders = ... }) instead of manual header assignment
• Fix manifest productId to match test data

AOT compatibility

All changes are static-analyzed at compile time — no reflection, no Activator, no DynamicCode. Existing AOT warnings are pre-existing.

Design

The global auth provider now lives in HttpClientProvider: SetDefaultAuthProvider() one call, both Verification and Report paths covered. Extra headers are a first-class config property, not glue code.

[Copilot]

Pull request overview

Unifies HTTP authentication and request header injection across GeneralUpdate.Core request paths (validation + reporting) by centralizing global auth and extra headers in HttpClientProvider, and updates the client test configuration to use the new config-based header/auth flow.

Changes:

• Introduces HttpClientProvider.DefaultAuthProvider, ExtraHeaders, and ApplyAuthAsync() to apply global auth + headers consistently.
• Updates VersionService and HttpUpdateReporter to use the unified global auth provider and shared HttpClient.
• Adds CustomHeaders to configuration and syncs config headers into the global HTTP layer; updates test manifest + client test setup accordingly.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
tests/ClientTest/Program.cs	Switches test to SetConfig(UpdateRequest { ... CustomHeaders ... }) and sets Basic auth in config.
tests/ClientTest/generalupdate.manifest.json	Updates productId to match expected test data.
src/c#/GeneralUpdate.Core/Network/VersionService.cs	Renames fields for clarity and delegates global auth to HttpClientProvider.DefaultAuthProvider.
src/c#/GeneralUpdate.Core/Network/HttpClientProvider.cs	Adds global default auth provider, extra headers store, and a helper to apply them to requests.
src/c#/GeneralUpdate.Core/Download/Reporting/IUpdateReporter.cs	Uses shared HttpClientProvider.Shared and applies global auth/headers before report POSTs.
src/c#/GeneralUpdate.Core/Configuration/UpdateConfiguration.cs	Adds CustomHeaders to the shared configuration base class.
src/c#/GeneralUpdate.Core/Configuration/ConfigurationMapper.cs	Maps CustomHeaders from UpdateRequest to UpdateContext.
src/c#/GeneralUpdate.Core/Configuration/AbstractBootstrap.cs	Adds overload to register a pre-constructed IHttpAuthProvider instance.
src/c#/GeneralUpdate.Core/Bootstrap/GeneralUpdateBootstrap.cs	Syncs CustomHeaders into HttpClientProvider.ExtraHeaders during SetConfig().

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.