no getter available for X-Terraform-Get source protocol

[jbgraindorge-pubfac]

Terraform Version

Terraform v1.2.2

Terraform Configuration Files

module "cloudfront" {
  source = "https://api.example.com/module"
  [...]
}

Expected Behavior

Downloading https://api.example.com/module cloudfront...
- cloudfront in .terraform/modules/cloudfront

Actual Behavior

Could not download module "cloudfront" (cloudfront.tf:1) source code from
│ "https://api.example.com/module": error
│ downloading 'https://api.example.com/module':
│ no getter available for X-Terraform-Get source protocol:
│ "github.com/terraform-aws-modules/terraform-aws-cloudfront?ref=v2.9.3"

Steps to Reproduce

terraform init

Additional Context

We are using custom API to return modules locations and versions, it is working fine with terraform 1.2.1 but it is not working anymore with terraform 1.2.2

[jbgraindorge-pubfac]

I also opened a report in hashicorp/go-getter#368

[jbardin]

Hi @jbgraindorge-pubfac,

Thanks for reporting the issue! Some security fixes upstream have caused the X-Terraform-Get response in your module registry API to get rejected to protect from unexpected protocol switching. This was not expected, but if you are in a position to work around it, the problem is triggered by your X-Terraform-Get not having an explicit protocol. Returning a complete URL starting with git::https:// should get it working for now.

Thanks!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.