User survey #29

hickford · 2023-07-04T21:46:36Z

Hi users. A quick survey:

How did you discover git-credential-oauth?
How did you install git-credential-oauth?
Do you authenticate to any Git hosts outside GitHub?
What's your credential.helper configuration? Run git config --get-all credential.helper to check.
What problem did git-credential-Oauth solve for you?
Any ideas for improvements?

The text was updated successfully, but these errors were encountered:

kra-mo · 2023-07-05T20:42:52Z

dnf search git-credential
dnf
I may be stupid, but I have no idea how I'm supposed to use the get command, some more documentation on that would be appreciated

hickford · 2023-07-07T21:59:39Z

@kra-mo The get command is called by Git. The only command you need to run manually is git credential-oauth configure.

I'll try to make this clearer.

chisaato · 2023-07-08T16:35:29Z

from news on android google chrome, maybe some blogs recommend this.
download and install binary. cause currently fedora haven't upgrade to latest
more docs, such as mention github support is out of box, I have found this when I browse the source
3.1 close browser tab when authorize success (maybe need js in html?).

edavidaja · 2023-07-08T17:25:37Z

I saw it go by in a list of scoop or brew updates
scoop / brew / into a container image
I will be recommending this project for use in server-based development environments once the work on headless mode is complete.

Thank you for your work on this!

hickford · 2023-07-08T18:38:55Z

@gzzchh Thanks.

close browser tab when authorize success

I'd like that, but AFAIK it's not technically possible because "Scripts may not close windows that were not opened by script" https://developer.mozilla.org/en-US/docs/Web/API/Window/close

chisaato · 2023-07-12T14:48:24Z

Follow the code generate by ChatGPT. closing window is OK.

		html := `
<html>
<head>
<script>
setTimeout(function() {
    window.close();
}, 2000);
</script>
</head>
<body>
Success. You may close this page and return to Git.
</body>
</html>
`

		w.Write([]byte(html))

rbelem · 2023-07-15T00:40:33Z

On askubuntu.com
devbox global add git-credential-oauth
On-premise bitbucket and gitlab

Christoph-Raab · 2023-08-03T06:55:38Z

Recommendation by colleague
Downloaded from github (not packed in ubuntu 22.04)
Only use it for on-prem GitLab
New ssh solution was horrible implemented and too much effort to setup
Include in ubuntu 22.04 package manager, maybe autorefresh tokens in the background, +1 to autoclose browser window

hickford · 2023-08-03T08:16:09Z

@Christoph-Raab Thanks for your response.

autorefresh tokens in the background

Are you having to reauthenticate regularly in browser? What's your helper setup git config --get-all credential.helper? If you are using cache, try setting a longer timeout such as cache --timeout 72000 (20 hours).

Christoph-Raab · 2023-08-07T12:52:07Z

I regular have to retry on a push or fetch

remote: HTTP Basic: Access denied. The provided password or token is incorrect or your account has 2FA enabled and you must use a personal access token instead of a password. See https://<gitlab-host>/help/topics/git/troubleshooting_git#error-on-git-fetch-http-basic-access-denied

git config --get-all credential.helper doesn't return anything, but my git config looks like this

 [credential "<gitlab-host>"]
         oauthClientId = <some id>
         oauthClientSecret = <some secret>
         oauthScopes = read_repository write_repository
         oauthAuthURL = /oauth/authorize
         oauthTokenURL = /oauth/token
         helper = cache --timeout 36000
         helper = oauth

hickford · 2023-08-07T13:22:43Z

I regularly have to retry on a push or fetch

Sounds like Git is trying to use expired OAuth tokens. @Christoph-Raab Which version of Git are you using (git --version)? credential-cache has support for password_expiry_utc attribute from 2.40 and oauth_refresh_token attribute from 2.41 (#20) .

Christoph-Raab · 2023-08-07T14:13:22Z

I'm on 2.34.1. I can try to update and check if that fixes the issue.

jupblb · 2023-10-03T08:56:04Z

Home Manager news
Home Manager
No
cache --timeout 36000
No longer need to deploy my private ssh key
All good! Although you may want to use another tool to run this survey. 😉

Svenlaa · 2023-12-09T14:20:18Z

Stackoverflow answer
sudo dnf install git-credential-oauth
Yes GitLab, but not this OS/Machine
cache --timeout 7200 \n oauth
I wanted to clone my private repo from github on linux, and this got my creds setup
A survey where all answers are public maybe isn't the best idea

abh · 2023-12-10T21:45:40Z

Looking for how to get go get ... to authenticate to a private https-only git repository (where I don't think I actually needed this; disabling GOSUMDB for my domain was the solution).
Homebrew
Yes, Gitea (and gitosis and GitHub enterprise and ...)
my config is:

osxkeychain
cache --timeout 10400
oauth

plus

[credential "https://gitea...."]
        helper = oauth
	oauthClientId = a386d92d-2983-....
	oauthScopes = read_repository
	oauthAuthURL = /login/oauth/authorize
	oauthTokenURL = /login/oauth/access_token

Less long lived magic tokens.
I'll make a separate issue

voltagex · 2024-01-21T08:30:49Z

How did you discover git-credential-oauth?

Searched, because it's 2024 and Git on Linux still doesn't have password storage by default

How did you install git-credential-oauth?

deb package, then uninstalled as it pulled in most of an XServer, then realised it wouldn't work for me as it's a remote box and I'm not SSH forwarding

Do you authenticate to any Git hosts outside GitHub?

Yes

What's your credential.helper configuration? Run git config --get-all credential.helper to check.

Nothing, on this box, apparently.

"manager" on Windows.

What problem did git-credential-Oauth solve for you?

None yet.

Any ideas for improvements?

I don't know - without CLI-only OAuth working this won't work for me

hickford · 2024-01-21T13:31:48Z

@voltagex

deb package pulled in most of an XServer

Debian package git-credential-oauth has no strict dependencies, though it recommends package xdg-open. You can avoid installing it with apt install --no-install-recommends git-credential-oauth.

it wouldn't work for me as it's a remote box

Have you tried helper = oauth -device (v0.11.0 or later)? This works on any system including browserless systems. https://github.com/hickford/git-credential-oauth/blob/main/README.md#browserless-systems

voltagex · 2024-03-03T10:00:05Z

Thanks for your help @hickford

I am able to use it on my box that has a UI and a web browser, but -device with Forgejo leads to endpoint missing DeviceAuthURL which I believe needs some changes from Forgejo itself.

j-lakeman · 2024-05-16T11:56:46Z

1. How did you discover git-credential-oauth?

apt search git credential / Stack Overflow

2. How did you install git-credential-oauth?

apt

3. Do you authenticate to any Git hosts outside GitHub?

Gitea
Forgejo
Codeberg
GitLab

6. Any ideas for improvements?

pls support more “indie” platforms like the ones above

midsorbet · 2024-06-30T19:46:00Z

Have you tried helper = oauth -device (v0.11.0 or later)? This works on any system including browserless systems. https://github.com/hickford/git-credential-oauth/blob/main/README.md#browserless-systems

GitHub kept giving me a link that would redirect back to 127.0.0.1:37653 after logging in from a browser. I had to setup a SSH tunnel to set it up on my hetzner box (ssh -i -L 127.0.0.1:37653:127.0.0.1:37653 hetzner). It did work as advertised when I was setting it up on my local machine.

System details
OS: nixOS 24.05
Version: 0.11.3

Git config

[credential]
        helper = "/nix/store/xl2hmm62sbjfm574car3a8ac45y83qik-git-credential-oauth-0.11.3/bin/git-credential-oauth"
        helper = "cache --timeout 120"
        helper = "oauth -device"

Wallby · 2024-08-05T13:02:05Z

I saw https://github.com/git-ecosystem/git-credential-manager/blob/main/docs/credstores.md but the gpg option was too complex/not user friendly, secretservice didn't work on chromeos flex, and I didn't want to use cache (see 5 for why). I found this by running apt search for git credential stuff and this showed up
Using apt on chromeos flex linux development environment
The default (using git credential-oauth configure)
Not having to rely on having to enter my git token every time the cache runs out because I am signed into github with my browser

mass8326 · 2024-08-17T05:35:38Z

Discovered git-credential-oath when Googling for a seamless way of authenticating like on Windows
Previously installed using the PPA, but now I install using Go
No hosts used outside GitHub
See below for my credential.helper configuration
git-credential-oauth prevents the annoyance of having to use SSH or PATs
I've opened a separate issue for a potential improvement

My credential.helper on bare metal Linux:

/usr/share/doc/git/contrib/credential/libsecret/git-credential-libsecret
oauth

My credential.helper on WSL:

cache --timeout 21600
oauth

JDLH · 2024-09-23T05:48:51Z

How did you discover git-credential-oauth?

I was working on a private GitHub repository where I needed my local computer's bare git to authenticate to GitHub using OAuth. (The project did not want to issue personal access tokens or use ssh.) GitHub's git cli instructions recommended using Git Credential Manager, installing via Homebrew. I use MacPorts and not Homebrew, so I searched MacPorts for a git credential helper supporting oauth. I found this.

How did you install git-credential-oauth?

Using MacPorts and its git-credential-oauth port.

Do you authenticate to any Git hosts outside GitHub?

No. And not GitHub yet! I am having difficulty.

What's your credential.helper configuration? Run git config --get-all credential.helper to check.

% git config --get-all credential.helper                   
osxkeychain
oauth -verbose

What problem did git-credential-Oauth solve for you?

I hope that it will let me work with a private repo on GitHub.

Any ideas for improvements?

Better diagnostics for my failure case.

mariuszste · 2024-10-16T10:58:57Z

stack overflow
AUR
yes, forgejo

cache --timeout 21600
oauth

not being able to use SSH, no passwords on disk, "modern"
Document what's supported/tested. I was shocked when it worked first try. A support matrix telling you what works out of the box, what requires additional configuration, what doesn't and why, etc.

hickford added the help wanted Extra attention is needed label Jul 4, 2023

hickford pinned this issue Jul 4, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

User survey #29

User survey #29

hickford commented Jul 4, 2023 •

edited

Loading

kra-mo commented Jul 5, 2023 •

edited

Loading

hickford commented Jul 7, 2023 •

edited

Loading

chisaato commented Jul 8, 2023

edavidaja commented Jul 8, 2023

hickford commented Jul 8, 2023

chisaato commented Jul 12, 2023

rbelem commented Jul 15, 2023

Christoph-Raab commented Aug 3, 2023 •

edited by hickford

Loading

hickford commented Aug 3, 2023

Christoph-Raab commented Aug 7, 2023 •

edited

Loading

hickford commented Aug 7, 2023 •

edited

Loading

Christoph-Raab commented Aug 7, 2023

jupblb commented Oct 3, 2023 •

edited

Loading

Svenlaa commented Dec 9, 2023

abh commented Dec 10, 2023 •

edited

Loading

voltagex commented Jan 21, 2024 •

edited

Loading

hickford commented Jan 21, 2024 •

edited

Loading

voltagex commented Mar 3, 2024

j-lakeman commented May 16, 2024

midsorbet commented Jun 30, 2024 •

edited by hickford

Loading

Wallby commented Aug 5, 2024

mass8326 commented Aug 17, 2024

JDLH commented Sep 23, 2024

mariuszste commented Oct 16, 2024

User survey #29

User survey #29

Comments

hickford commented Jul 4, 2023 • edited Loading

kra-mo commented Jul 5, 2023 • edited Loading

hickford commented Jul 7, 2023 • edited Loading

chisaato commented Jul 8, 2023

edavidaja commented Jul 8, 2023

hickford commented Jul 8, 2023

chisaato commented Jul 12, 2023

rbelem commented Jul 15, 2023

Christoph-Raab commented Aug 3, 2023 • edited by hickford Loading

hickford commented Aug 3, 2023

Christoph-Raab commented Aug 7, 2023 • edited Loading

hickford commented Aug 7, 2023 • edited Loading

Christoph-Raab commented Aug 7, 2023

jupblb commented Oct 3, 2023 • edited Loading

Svenlaa commented Dec 9, 2023

abh commented Dec 10, 2023 • edited Loading

voltagex commented Jan 21, 2024 • edited Loading

hickford commented Jan 21, 2024 • edited Loading

voltagex commented Mar 3, 2024

j-lakeman commented May 16, 2024

midsorbet commented Jun 30, 2024 • edited by hickford Loading

Wallby commented Aug 5, 2024

mass8326 commented Aug 17, 2024

JDLH commented Sep 23, 2024

mariuszste commented Oct 16, 2024

hickford commented Jul 4, 2023 •

edited

Loading

kra-mo commented Jul 5, 2023 •

edited

Loading

hickford commented Jul 7, 2023 •

edited

Loading

Christoph-Raab commented Aug 3, 2023 •

edited by hickford

Loading

Christoph-Raab commented Aug 7, 2023 •

edited

Loading

hickford commented Aug 7, 2023 •

edited

Loading

jupblb commented Oct 3, 2023 •

edited

Loading

abh commented Dec 10, 2023 •

edited

Loading

voltagex commented Jan 21, 2024 •

edited

Loading

hickford commented Jan 21, 2024 •

edited

Loading

midsorbet commented Jun 30, 2024 •

edited by hickford

Loading