Pip 10 basic auth failure when installing build dependencies

• Pip version: 10.0.0
• Python version: 3.6.5
• Operating system: Linux (Alpine, Gentoo). Reproduced once on macOS; could not a second time.

Description:

Attempting to install a package with build dependencies from a private index with basic auth, without a ~/.netrc file fails with EOFError: EOF when reading a line on line 189 of _internal/download.py (handle_401(), username = six.moves.input("User for %s: " % parsed.netloc)).

What I’ve run:

$ docker pull python:3.6-alpine
...
$ docker run -it -e PIP_INDEX_URL=https://zware:[e-mail]/myindex python:3.6-alpine /bin/sh
/ # python3.6 -m venv venv
/ # ./venv/bin/python -m pip install -U pip
<pip 10 downloaded from private index, replaces pip 9.0.3>
/ # ./venv/bin/python -m pip install aiohttp  # "--no-binary aiohttp" may be necessary on non-Alpine platforms
< downloads from private index >
  Installing build dependencies ... error
  Complete output from command /venv/bin/python -m pip install --ignore-installed --no-user --prefix /tmp/pip-build-env-me9p5l31 <full URL to setuptools on my private index> <full URL to wheel on my private index>:
  Looking in indexes: <my index, with basic auth in URL>
  Collecting setuptools==39.0.1 from <full URL to setuptools on my private index>
  User for <my index netloc>: Exception:
  Traceback (most recent call last):
    File "/venv/lib/python3.6/site-packages/pip/_internal/basecommand.py", line 228, in main
      status = self.run(options, args)
    File "/venv/lib/python3.6/site-packages/pip/_internal/commands/install.py", line 291, in run
      resolver.resolve(requirement_set)
    File "/venv/lib/python3.6/site-packages/pip/_internal/resolve.py", line 103, in resolve
      self._resolve_one(requirement_set, req)
    File "/venv/lib/python3.6/site-packages/pip/_internal/resolve.py", line 257, in _resolve_one
      abstract_dist = self._get_abstract_dist_for(req_to_install)
    File "/venv/lib/python3.6/site-packages/pip/_internal/resolve.py", line 210, in _get_abstract_dist_for
      self.require_hashes
    File "/venv/lib/python3.6/site-packages/pip/_internal/operations/prepare.py", line 308, in prepare_linked_requirement
      progress_bar=self.progress_bar
    File "/venv/lib/python3.6/site-packages/pip/_internal/download.py", line 837, in unpack_url
      progress_bar=progress_bar
    File "/venv/lib/python3.6/site-packages/pip/_internal/download.py", line 674, in unpack_http_url
      progress_bar)
    File "/venv/lib/python3.6/site-packages/pip/_internal/download.py", line 869, in _download_http_url
      stream=True,
    File "/venv/lib/python3.6/site-packages/pip/_vendor/requests/sessions.py", line 521, in get
      return self.request('GET', url, **kwargs)
    File "/venv/lib/python3.6/site-packages/pip/_internal/download.py", line 397, in request
      return super(PipSession, self).request(method, url, *args, **kwargs)
    File "/venv/lib/python3.6/site-packages/pip/_vendor/requests/sessions.py", line 508, in request
      resp = self.send(prep, **send_kwargs)
    File "/venv/lib/python3.6/site-packages/pip/_vendor/requests/sessions.py", line 625, in send
      r = dispatch_hook('response', hooks, r, **kwargs)
    File "/venv/lib/python3.6/site-packages/pip/_vendor/requests/hooks.py", line 31, in dispatch_hook
      _hook_data = hook(hook_data, **kwargs)
    File "/venv/lib/python3.6/site-packages/pip/_internal/download.py", line 189, in handle_401
      username = six.moves.input("User for %s: " % parsed.netloc)
  EOFError: EOF when reading a line

-------------------------------------------
Command "/venv/bin/python -m pip install --ignore-installed --no-user --prefix /tmp/pip-build-env-me9p5l31 <full URL to setuptools on my private index> <full URL to wheel on my private index>" failed with error code 2 in None

[zware]

Since it may be helpful to others encountering this: I’ve successfully worked around the issue by adding the credentials to ~/.netrc and leaving the user:pass out of the index URL.

I can also confirm what @lopter said about pip <= 9.0.3 not being affected.

Edit: Left out an all-important =; pip == 9.0.3 is not affected, only 10.0.0.

[mgu]

same for me, the basic auth in the index URL is not used when downloading the packages