Fix AzureRepositoryProvider readBytes method for binary content

Changed Azure API call from JSON-embedded content to direct binary download
using 'download: true' parameter. This prevents binary data corruption that
occurred when converting JSON-escaped strings back to bytes.

The test now passes with correct file size (22,915 bytes) and SHA256 hash.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: pditommaso

modules/nextflow/src/main/groovy/nextflow/scm/AzureRepositoryProvider.groovy

@@ -183,12 +183,35 @@ final class AzureRepositoryProvider extends RepositoryProvider {
         "${config.server}/${urlPath}"
     }
 
-    /** {@inheritDoc} */
     @Override
-    byte[] readBytes(String path) {
+    String readText( String path ) {
         final url = getContentUrl(path)
         final response = invokeAndParseResponse(url)
-        return response.get('content')?.toString()?.getBytes()
+        return response.get('content')?.toString()
+    }
+
+    /** {@inheritDoc} */
+    @Override
+    byte[] readBytes(String path) {
+        // For binary content, use direct download instead of JSON embedding
+        final queryParams = [
+                'download': true,
+                'includeContent': false,
+                'includeContentMetadata': false,
+                "api-version": 6.0,
+                'path': path
+        ] as Map<String,Object>
+        
+        if( revision ) {
+            queryParams['versionDescriptor.version'] = revision
+            if( COMMIT_REGEX.matcher(revision).matches() )
+                queryParams['versionDescriptor.versionType'] = 'commit'
+        }
+        
+        final queryString = queryParams.collect({ "$it.key=$it.value"}).join('&')
+        final url = "$endpointUrl/items?$queryString"
+        // Use invokeBytes for direct binary content download
+        return invokeBytes(url)
     }
 
 }

modules/nextflow/src/test/groovy/nextflow/cli/CmdConfigTest.groovy

@@ -24,6 +24,7 @@ import nextflow.extension.FilesEx
 import nextflow.plugin.Plugins
 import nextflow.secret.SecretsLoader
 import spock.lang.IgnoreIf
+import spock.lang.Requires
 import spock.lang.Specification
 /**
  *
@@ -384,10 +385,12 @@ class CmdConfigTest extends Specification {
 
     }
 
-
     @IgnoreIf({System.getenv('NXF_SMOKE')})
+    @Requires({System.getenv('NXF_GITHUB_ACCESS_TOKEN')})
     def 'should resolve remote config' () {
         given:
+        SysEnv.push(GITHUB_TOKEN: System.getenv('NXF_GITHUB_ACCESS_TOKEN'))
+        and:
         def buffer = new ByteArrayOutputStream()
         def cmd = new CmdConfig(
                 args: ['https://github.com/nextflow-io/hello'],
@@ -404,6 +407,9 @@ class CmdConfigTest extends Specification {
             }
             '''
             .stripIndent()
+
+        cleanup:
+        SysEnv.pop()
     }
 
     @IgnoreIf({System.getenv('NXF_SMOKE')})

modules/nextflow/src/test/groovy/nextflow/scm/AzureRepositoryProviderTest.groovy

@@ -20,10 +20,6 @@ import nextflow.exception.AbortOperationException
 import spock.lang.IgnoreIf
 import spock.lang.Requires
 import spock.lang.Specification
-
-import javax.imageio.ImageIO
-import javax.imageio.stream.MemoryCacheImageInputStream
-
 /**
  *
  * @author Tobias Neumann <tobias.neumann.at@gmail.com>
@@ -153,11 +149,7 @@ class AzureRepositoryProviderTest extends Specification {
 
         then:
         result.length == 22915
-        and:
-        def inputStream = new ByteArrayInputStream(result)
-        def imageInput = new MemoryCacheImageInputStream(inputStream)
-        final readers = ImageIO.getImageReaders(imageInput)
-        readers.hasNext()
+        result.sha256() == '7a396344498750f614155f6e4f38b7d6ca98ced45daf0921b64acf73b18efaf4'
     }
 
 

modules/nextflow/src/test/groovy/nextflow/scm/GiteaRepositoryProviderTest.groovy

@@ -19,10 +19,6 @@ package nextflow.scm
 import spock.lang.IgnoreIf
 import spock.lang.Requires
 import spock.lang.Specification
-
-import javax.imageio.ImageIO
-import javax.imageio.stream.MemoryCacheImageInputStream
-
 /**
  *
  * @author Akira Sekiguchi <pachiras.yokohama@gmail.com>
@@ -112,20 +108,18 @@ class GiteaRepositoryProviderTest extends Specification {
 
 
     @IgnoreIf({System.getenv('NXF_SMOKE')})
-    @Requires({System.getenv('NXF_AZURE_REPOS_TOKEN')})
+    @Requires({System.getenv('NXF_GITEA_ACCESS_TOKEN')})
     def 'should read bytes file content'() {
         given:
         def token =  System.getenv('NXF_GITEA_ACCESS_TOKEN')
         def config = new ProviderConfig('gitea', new ConfigSlurper().parse(CONFIG).providers.mygitea as ConfigObject).setAuth(token)
 
         when:
-        def repo = new GiteaRepositoryProvider('swingingsimiangitea/rnaseq', config)
+        def repo = new GiteaRepositoryProvider('pditommaso/test-hello', config)
         def result = repo.readBytes('docs/images/nf-core-rnaseq_logo_light.png')
 
         then:
-        def inputStream = new ByteArrayInputStream(result)
-        def imageInput = new MemoryCacheImageInputStream(inputStream)
-        final readers = ImageIO.getImageReaders(imageInput)
-        readers.hasNext()
+        result.length == 22915
+        result.sha256() == '7a396344498750f614155f6e4f38b7d6ca98ced45daf0921b64acf73b18efaf4'
     }
 }