fix(config): handle invalid repository configurations gracefully

[CAOShurong]

Pull Request Check List

Resolves: #10570

• Added tests for changed code.
• Updated documentation for changed code (not needed for this recovery-path fix).

When a repository in config.toml contains an invalid or nested configuration, Poetry could fail while reading it before recovery commands such as poetry config --unset or poetry config --list had a chance to run. Invalid individual URLs could reach urllib.parse.urlsplit, while a malformed top-level repositories value such as null, a list, or a scalar could fail even earlier during configuration traversal.

Changes:

• Skip a malformed top-level repositories value with a warning.
• Skip individual repositories whose URL is not a string.
• Guard direct AuthenticatorRepositoryConfig construction against a non-string URL.
• Catch PoetryError while locating local project configuration so poetry config can still recover.
• Cover nested invalid URLs and four non-mapping top-level shapes.

Validation on exact head 87c580bc:

• 127 focused authenticator/config-command tests passed.
• Mypy passed for the two changed authenticator files.
• The complete pre-commit hook set passed for the two changed authenticator files.
• git diff --check passed.

AI assistance: OpenAI Codex assisted with the follow-up diagnosis, implementation, tests, and verification. The contributor reviewed and owns the submitted change.

[sourcery-ai]

Hey - I've found 1 issue

Prompt for AI Agents

Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="src/poetry/utils/authenticator.py" line_range="403-405" />
<code_context>
             self._configured_repositories = {}
             for repository_name in self._config.get("repositories", []):
                 url = self._config.get(["repositories", repository_name, "url"])
+                if not isinstance(url, str):
+                    logger.warning(
+                        "Repository '%s' has an invalid url configured in settings;"
</code_context>
<issue_to_address>
**issue (bug_risk):** `configured_repositories` still raises `TypeError` before reaching the new URL check when the top-level `repositories` setting is `None`, a list, or another non-iterable/non-mapping value, because it iterates the raw setting directly. Such a malformed repository configuration still prevents commands from recovering.

**Triggers:** When `config.toml` contains a malformed top-level `repositories` value rather than a mapping.

**Suggested fix:** Read the setting with a mapping default and skip or warn when it is not a mapping before iterating its repository names.
</issue_to_address>

Sourcery assessment

Approval pending. 1 finding to address first.

Blocking findings: src/poetry/utils/authenticator.py:405

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

[sourcery-ai]

Sourcery assessment

Approved.

[sourcery-ai]

Sourcery assessment

Approved.