From a108ea54c6090610d060e66c9682a66796e0dd4b Mon Sep 17 00:00:00 2001
From: Thodoris Greasidis <thgreasi@gmail.com>
Date: Tue, 8 Sep 2026 12:35:53 +0300
Subject: [PATCH] /auth/v1/token: Search using an exact REGISTRY2_HOST image
 location prefix first as an optimization

Change-type: patch
---
 src/features/registry/registry.ts | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/src/features/registry/registry.ts b/src/features/registry/registry.ts
index d1ceb37ab..23a22a86b 100644
--- a/src/features/registry/registry.ts
+++ b/src/features/registry/registry.ts
@@ -215,6 +215,28 @@ const resolveWriteAccess = async (
 
 const resolveImageId = multiCacheMemoizee(
 	async (effectiveName: string, tx: Tx): Promise<number | undefined> => {
+		if (effectiveName.startsWith('v2/')) {
+			// Since the legacy image_location prefixes are not in use since 2018,
+			// and as a result the vast majority of the images atm use the new
+			// REGISTRY2_HOST/v2/<uuid> format, and since an exact match query is 100x
+			// faster than a `$endswith`,
+			// as an optimization we first try to find the image using
+			// an exact match optimistically assuming it has a REGISTRY2 url prefix,
+			// and then fallback to `$endswith` if the optimization doesn't return any result.
+			const exactMatchRegistry2Image = await api.resin.get({
+				resource: 'image',
+				passthrough: { req: permissions.rootRead, tx },
+				id: {
+					is_stored_at__image_location: `${REGISTRY2_HOST}/${effectiveName}`,
+				},
+				options: {
+					$select: 'id',
+				},
+			});
+			if (exactMatchRegistry2Image != null) {
+				return exactMatchRegistry2Image.id;
+			}
+		}
 		const [image] = await api.resin.get({
 			resource: 'image',
 			passthrough: { req: permissions.rootRead, tx },