1 <?xml version=
"1.0" encoding=
"UTF-8"?>
2 <!DOCTYPE html PUBLIC
"-//W3C//DTD XHTML 1.1//EN"
3 "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
4 <html xmlns=
"http://www.w3.org/1999/xhtml" xml:
lang=
"en">
6 <meta http-equiv=
"Content-Type" content=
"application/xhtml+xml; charset=UTF-8" />
7 <meta name=
"generator" content=
"AsciiDoc 10.2.0" />
8 <title>git-credential(
1)
</title>
9 <style type=
"text/css">
10 /* Shared CSS for AsciiDoc xhtml11 and html5 backends */
14 font-family: Georgia,serif;
18 h1, h2, h3, h4, h5, h6,
19 div.title, caption.title,
20 thead, p.table.header,
22 #author, #revnumber, #revdate, #revremark,
24 font-family: Arial,Helvetica,sans-serif;
28 margin:
1em
5%
1em
5%;
33 text-decoration: underline;
49 h1, h2, h3, h4, h5, h6 {
57 border-bottom:
2px solid silver;
77 border:
1px solid silver;
88 ul
> li { color: #aaa; }
89 ul
> li
> * { color: black; }
91 .monospaced, code, pre {
92 font-family:
"Courier New", Courier, monospace;
99 white-space: pre-wrap;
109 #revnumber, #revdate, #revremark {
114 border-top:
2px solid silver;
120 padding-bottom:
0.5em;
124 padding-bottom:
0.5em;
129 margin-bottom:
1.5em;
131 div.imageblock, div.exampleblock, div.verseblock,
132 div.quoteblock, div.literalblock, div.listingblock, div.sidebarblock,
133 div.admonitionblock {
135 margin-bottom:
1.5em;
137 div.admonitionblock {
139 margin-bottom:
2.0em;
144 div.content { /* Block element content. */
148 /* Block element titles. */
149 div.title, caption.title {
154 margin-bottom:
0.5em;
160 td div.title:first-child {
163 div.content div.title:first-child {
166 div.content + div.title {
170 div.sidebarblock
> div.content {
172 border:
1px solid #dddddd;
173 border-left:
4px solid #f0f0f0;
177 div.listingblock
> div.content {
178 border:
1px solid #dddddd;
179 border-left:
5px solid #f0f0f0;
184 div.quoteblock, div.verseblock {
188 border-left:
5px solid #f0f0f0;
192 div.quoteblock
> div.attribution {
197 div.verseblock
> pre.content {
198 font-family: inherit;
201 div.verseblock
> div.attribution {
205 /* DEPRECATED: Pre version
8.2.7 verse style literal block. */
206 div.verseblock + div.attribution {
210 div.admonitionblock .icon {
214 text-decoration: underline;
216 padding-right:
0.5em;
218 div.admonitionblock td.content {
220 border-left:
3px solid #dddddd;
223 div.exampleblock
> div.content {
224 border-left:
3px solid #dddddd;
228 div.imageblock div.content { padding-left:
0; }
229 span.image img { border-style: none; vertical-align: text-bottom; }
230 a.image:visited { color: white; }
234 margin-bottom:
0.8em;
247 list-style-position: outside;
250 list-style-type: decimal;
253 list-style-type: lower-alpha;
256 list-style-type: upper-alpha;
259 list-style-type: lower-roman;
262 list-style-type: upper-roman;
265 div.compact ul, div.compact ol,
266 div.compact p, div.compact p,
267 div.compact div, div.compact div {
269 margin-bottom:
0.1em;
281 margin-bottom:
0.8em;
284 padding-bottom:
15px;
286 dt.hdlist1.strong, td.hdlist1.strong {
292 padding-right:
0.8em;
298 div.hdlist.compact tr {
307 .footnote, .footnoteref {
311 span.footnote, span.footnoteref {
312 vertical-align: super;
316 margin:
20px
0 20px
0;
320 #footnotes div.footnote {
326 border-top:
1px solid silver;
335 padding-right:
0.5em;
336 padding-bottom:
0.3em;
344 #footer-badges { display: none; }
348 margin-bottom:
2.5em;
356 margin-bottom:
0.1em;
359 div.toclevel0, div.toclevel1, div.toclevel2, div.toclevel3, div.toclevel4 {
376 span.aqua { color: aqua; }
377 span.black { color: black; }
378 span.blue { color: blue; }
379 span.fuchsia { color: fuchsia; }
380 span.gray { color: gray; }
381 span.green { color: green; }
382 span.lime { color: lime; }
383 span.maroon { color: maroon; }
384 span.navy { color: navy; }
385 span.olive { color: olive; }
386 span.purple { color: purple; }
387 span.red { color: red; }
388 span.silver { color: silver; }
389 span.teal { color: teal; }
390 span.white { color: white; }
391 span.yellow { color: yellow; }
393 span.aqua-background { background: aqua; }
394 span.black-background { background: black; }
395 span.blue-background { background: blue; }
396 span.fuchsia-background { background: fuchsia; }
397 span.gray-background { background: gray; }
398 span.green-background { background: green; }
399 span.lime-background { background: lime; }
400 span.maroon-background { background: maroon; }
401 span.navy-background { background: navy; }
402 span.olive-background { background: olive; }
403 span.purple-background { background: purple; }
404 span.red-background { background: red; }
405 span.silver-background { background: silver; }
406 span.teal-background { background: teal; }
407 span.white-background { background: white; }
408 span.yellow-background { background: yellow; }
410 span.big { font-size:
2em; }
411 span.small { font-size:
0.6em; }
413 span.underline { text-decoration: underline; }
414 span.overline { text-decoration: overline; }
415 span.line-through { text-decoration: line-through; }
417 div.unbreakable { page-break-inside: avoid; }
427 margin-bottom:
1.5em;
429 div.tableblock
> table {
430 border:
3px solid #
527bbd;
432 thead, p.table.header {
439 /* Because the table frame attribute is overridden by CSS in most browsers. */
440 div.tableblock
> table[
frame=
"void"] {
443 div.tableblock
> table[
frame=
"hsides"] {
444 border-left-style: none;
445 border-right-style: none;
447 div.tableblock
> table[
frame=
"vsides"] {
448 border-top-style: none;
449 border-bottom-style: none;
460 margin-bottom:
1.5em;
462 thead, p.tableblock.header {
473 border-color: #
527bbd;
474 border-collapse: collapse;
476 th.tableblock, td.tableblock {
480 border-color: #
527bbd;
483 table.tableblock.frame-topbot {
484 border-left-style: hidden;
485 border-right-style: hidden;
487 table.tableblock.frame-sides {
488 border-top-style: hidden;
489 border-bottom-style: hidden;
491 table.tableblock.frame-none {
492 border-style: hidden;
495 th.tableblock.halign-left, td.tableblock.halign-left {
498 th.tableblock.halign-center, td.tableblock.halign-center {
501 th.tableblock.halign-right, td.tableblock.halign-right {
505 th.tableblock.valign-top, td.tableblock.valign-top {
508 th.tableblock.valign-middle, td.tableblock.valign-middle {
509 vertical-align: middle;
511 th.tableblock.valign-bottom, td.tableblock.valign-bottom {
512 vertical-align: bottom;
523 padding-bottom:
0.5em;
524 border-top:
2px solid silver;
525 border-bottom:
2px solid silver;
530 body.manpage div.sectionbody {
535 body.manpage div#toc { display: none; }
540 <script type=
"text/javascript">
542 var asciidoc = { // Namespace.
544 /////////////////////////////////////////////////////////////////////
545 // Table Of Contents generator
546 /////////////////////////////////////////////////////////////////////
548 /* Author: Mihai Bazon, September
2002
549 * http://students.infoiasi.ro/~mishoo
551 * Table Of Content generator
554 * Feel free to use this script under the terms of the GNU General Public
555 * License, as long as you do not remove or alter this notice.
558 /* modified by Troy D. Hanson, September
2006. License: GPL */
559 /* modified by Stuart Rackham,
2006,
2009. License: GPL */
562 toc: function (toclevels) {
564 function getText(el) {
566 for (var i = el.firstChild; i != null; i = i.nextSibling) {
567 if (i.nodeType ==
3 /* Node.TEXT_NODE */) // IE doesn't speak constants.
569 else if (i.firstChild != null)
575 function TocEntry(el, text, toclevel) {
578 this.toclevel = toclevel;
581 function tocEntries(el, toclevels) {
582 var result = new Array;
583 var re = new RegExp('[hH]([
1-'+(toclevels+
1)+'])');
584 // Function that scans the DOM tree for header elements (the DOM2
585 // nodeIterator API would be a better technique but not supported by all
587 var iterate = function (el) {
588 for (var i = el.firstChild; i != null; i = i.nextSibling) {
589 if (i.nodeType ==
1 /* Node.ELEMENT_NODE */) {
590 var mo = re.exec(i.tagName);
591 if (mo && (i.getAttribute(
"class") || i.getAttribute(
"className")) !=
"float") {
592 result[result.length] = new TocEntry(i, getText(i), mo[
1]-
1);
602 var toc = document.getElementById(
"toc");
607 // Delete existing TOC entries in case we're reloading the TOC.
608 var tocEntriesToRemove = [];
610 for (i =
0; i < toc.childNodes.length; i++) {
611 var entry = toc.childNodes[i];
612 if (entry.nodeName.toLowerCase() == 'div'
613 && entry.getAttribute(
"class")
614 && entry.getAttribute(
"class").match(/^toclevel/))
615 tocEntriesToRemove.push(entry);
617 for (i =
0; i < tocEntriesToRemove.length; i++) {
618 toc.removeChild(tocEntriesToRemove[i]);
621 // Rebuild TOC entries.
622 var entries = tocEntries(document.getElementById(
"content"), toclevels);
623 for (var i =
0; i < entries.length; ++i) {
624 var entry = entries[i];
625 if (entry.element.id ==
"")
626 entry.element.id =
"_toc_" + i;
627 var a = document.createElement(
"a");
628 a.href =
"#" + entry.element.id;
629 a.appendChild(document.createTextNode(entry.text));
630 var div = document.createElement(
"div");
632 div.className =
"toclevel" + entry.toclevel;
633 toc.appendChild(div);
635 if (entries.length ==
0)
636 toc.parentNode.removeChild(toc);
640 /////////////////////////////////////////////////////////////////////
641 // Footnotes generator
642 /////////////////////////////////////////////////////////////////////
644 /* Based on footnote generation code from:
645 * http://www.brandspankingnew.net/archive/
2005/
07/format_footnote.html
648 footnotes: function () {
649 // Delete existing footnote entries in case we're reloading the footnodes.
651 var noteholder = document.getElementById(
"footnotes");
655 var entriesToRemove = [];
656 for (i =
0; i < noteholder.childNodes.length; i++) {
657 var entry = noteholder.childNodes[i];
658 if (entry.nodeName.toLowerCase() == 'div' && entry.getAttribute(
"class") ==
"footnote")
659 entriesToRemove.push(entry);
661 for (i =
0; i < entriesToRemove.length; i++) {
662 noteholder.removeChild(entriesToRemove[i]);
665 // Rebuild footnote entries.
666 var cont = document.getElementById(
"content");
667 var spans = cont.getElementsByTagName(
"span");
670 for (i=
0; i
<spans.length; i++) {
671 if (spans[i].className ==
"footnote") {
673 var note = spans[i].getAttribute(
"data-note");
675 // Use [\s\S] in place of . so multi-line matches work.
676 // Because JavaScript has no s (dotall) regex flag.
677 note = spans[i].innerHTML.match(/\s*\[([\s\S]*)]\s*/)[
1];
679 "[<a id='_footnoteref_" + n +
"' href='#_footnote_" + n +
680 "' title='View footnote' class='footnote'>" + n +
"</a>]";
681 spans[i].setAttribute(
"data-note", note);
683 noteholder.innerHTML +=
684 "<div class='footnote' id='_footnote_" + n +
"'>" +
685 "<a href='#_footnoteref_" + n +
"' title='Return to text'>" +
686 n +
"</a>. " + note +
"</div>";
687 var id =spans[i].getAttribute(
"id");
688 if (id != null) refs[
"#"+id] = n;
692 noteholder.parentNode.removeChild(noteholder);
694 // Process footnoterefs.
695 for (i=
0; i
<spans.length; i++) {
696 if (spans[i].className ==
"footnoteref") {
697 var href = spans[i].getElementsByTagName(
"a")[
0].getAttribute(
"href");
698 href = href.match(/#.*/)[
0]; // Because IE return full URL.
701 "[<a href='#_footnote_" + n +
702 "' title='View footnote' class='footnote'>" + n +
"</a>]";
708 install: function(toclevels) {
711 function reinstall() {
712 asciidoc.footnotes();
714 asciidoc.toc(toclevels);
718 function reinstallAndRemoveTimer() {
719 clearInterval(timerId);
723 timerId = setInterval(reinstall,
500);
724 if (document.addEventListener)
725 document.addEventListener(
"DOMContentLoaded", reinstallAndRemoveTimer, false);
727 window.onload = reinstallAndRemoveTimer;
735 <body class=
"manpage">
738 git-credential(
1) Manual Page
741 <div class=
"sectionbody">
743 Retrieve and store user credentials
749 <h2 id=
"_synopsis">SYNOPSIS
</h2>
750 <div class=
"sectionbody">
751 <div class=
"listingblock">
752 <div class=
"content">
753 <pre><code>'git credential' (fill|approve|reject)
</code></pre>
758 <h2 id=
"_description">DESCRIPTION
</h2>
759 <div class=
"sectionbody">
760 <div class=
"paragraph"><p>Git has an internal interface for storing and retrieving credentials
761 from system-specific helpers, as well as prompting the user for
762 usernames and passwords. The git-credential command exposes this
763 interface to scripts which may want to retrieve, store, or prompt for
764 credentials in the same manner as Git. The design of this scriptable
765 interface models the internal C API; see credential.h for more
766 background on the concepts.
</p></div>
767 <div class=
"paragraph"><p>git-credential takes an
"action" option on the command-line (one of
768 <code>fill
</code>,
<code>approve
</code>, or
<code>reject
</code>) and reads a credential description
769 on stdin (see
<a href=
"#IOFMT">INPUT/OUTPUT FORMAT
</a>).
</p></div>
770 <div class=
"paragraph"><p>If the action is
<code>fill
</code>, git-credential will attempt to add
"username"
771 and
"password" attributes to the description by reading config files,
772 by contacting any configured credential helpers, or by prompting the
773 user. The username and password attributes of the credential
774 description are then printed to stdout together with the attributes
775 already provided.
</p></div>
776 <div class=
"paragraph"><p>If the action is
<code>approve
</code>, git-credential will send the description
777 to any configured credential helpers, which may store the credential
778 for later use.
</p></div>
779 <div class=
"paragraph"><p>If the action is
<code>reject
</code>, git-credential will send the description to
780 any configured credential helpers, which may erase any stored
781 credentials matching the description.
</p></div>
782 <div class=
"paragraph"><p>If the action is
<code>approve
</code> or
<code>reject
</code>, no output should be emitted.
</p></div>
786 <h2 id=
"_typical_use_of_git_credential">TYPICAL USE OF GIT CREDENTIAL
</h2>
787 <div class=
"sectionbody">
788 <div class=
"paragraph"><p>An application using git-credential will typically use
<code>git
789 credential
</code> following these steps:
</p></div>
790 <div class=
"olist arabic"><ol class=
"arabic">
793 Generate a credential description based on the context.
795 <div class=
"paragraph"><p>For example, if we want a password for
796 <code>https://example.com/foo.git
</code>, we might generate the following
797 credential description (don
’t forget the blank line at the end; it
798 tells
<code>git credential
</code> that the application finished feeding all the
799 information it has):
</p></div>
800 <div class=
"literalblock">
801 <div class=
"content">
802 <pre><code>protocol=https
804 path=foo.git
</code></pre>
809 Ask git-credential to give us a username and password for this
810 description. This is done by running
<code>git credential fill
</code>,
811 feeding the description from step (
1) to its standard input. The complete
812 credential description (including the credential per se, i.e. the
813 login and password) will be produced on standard output, like:
815 <div class=
"literalblock">
816 <div class=
"content">
817 <pre><code>protocol=https
820 password=secr3t
</code></pre>
822 <div class=
"paragraph"><p>In most cases, this means the attributes given in the input will be
823 repeated in the output, but Git may also modify the credential
824 description, for example by removing the
<code>path
</code> attribute when the
825 protocol is HTTP(s) and
<code>credential.useHttpPath
</code> is false.
</p></div>
826 <div class=
"paragraph"><p>If the
<code>git credential
</code> knew about the password, this step may
827 not have involved the user actually typing this password (the
828 user may have typed a password to unlock the keychain instead,
829 or no user interaction was done if the keychain was already
830 unlocked) before it returned
<code>password=secr3t
</code>.
</p></div>
834 Use the credential (e.g., access the URL with the username and
835 password from step (
2)), and see if it
’s accepted.
840 Report on the success or failure of the password. If the
841 credential allowed the operation to complete successfully, then
842 it can be marked with an
"approve" action to tell
<code>git
843 credential
</code> to reuse it in its next invocation. If the credential
844 was rejected during the operation, use the
"reject" action so
845 that
<code>git credential
</code> will ask for a new password in its next
846 invocation. In either case,
<code>git credential
</code> should be fed with
847 the credential description obtained from step (
2) (which also
848 contains the fields provided in step (
1)).
855 <h2 id=
"IOFMT">INPUT/OUTPUT FORMAT
</h2>
856 <div class=
"sectionbody">
857 <div class=
"paragraph"><p><code>git credential
</code> reads and/or writes (depending on the action used)
858 credential information in its standard input/output. This information
859 can correspond either to keys for which
<code>git credential
</code> will obtain
860 the login information (e.g. host, protocol, path), or to the actual
861 credential data to be obtained (username/password).
</p></div>
862 <div class=
"paragraph"><p>The credential is split into a set of named attributes, with one
863 attribute per line. Each attribute is specified by a key-value pair,
864 separated by an
<code>=
</code> (equals) sign, followed by a newline.
</p></div>
865 <div class=
"paragraph"><p>The key may contain any bytes except
<code>=
</code>, newline, or NUL. The value may
866 contain any bytes except newline or NUL.
</p></div>
867 <div class=
"paragraph"><p>Attributes with keys that end with C-style array brackets
<code>[]
</code> can have
868 multiple values. Each instance of a multi-valued attribute forms an
869 ordered list of values - the order of the repeated attributes defines
870 the order of the values. An empty multi-valued attribute (
<code>key[]=\n
</code>)
871 acts to clear any previous entries and reset the list.
</p></div>
872 <div class=
"paragraph"><p>In all cases, all bytes are treated as-is (i.e., there is no quoting,
873 and one cannot transmit a value with newline or NUL in it). The list of
874 attributes is terminated by a blank line or end-of-file.
</p></div>
875 <div class=
"paragraph"><p>Git understands the following attributes:
</p></div>
876 <div class=
"dlist"><dl>
878 <code>protocol
</code>
882 The protocol over which the credential will be used (e.g.,
891 The remote hostname for a network credential. This includes
892 the port number if one was specified (e.g.,
"example.com:8088").
900 The path with which the credential will be used. E.g., for
901 accessing a remote https repository, this will be the
902 repository
’s path on the server.
906 <code>username
</code>
910 The credential
’s username, if we already have one (e.g., from a
911 URL, the configuration, the user, or from a previously run helper).
915 <code>password
</code>
919 The credential
’s password, if we are asking it to be stored.
923 <code>password_expiry_utc
</code>
927 Generated passwords such as an OAuth access token may have an expiry date.
928 When reading credentials from helpers,
<code>git credential fill
</code> ignores expired
929 passwords. Represented as Unix time UTC, seconds since
1970.
933 <code>oauth_refresh_token
</code>
937 An OAuth refresh token may accompany a password that is an OAuth access
938 token. Helpers must treat this attribute as confidential like the password
939 attribute. Git itself has no special behaviour for this attribute.
947 When this special attribute is read by
<code>git credential
</code>, the
948 value is parsed as a URL and treated as if its constituent parts
949 were read (e.g.,
<code>url=https://example.com
</code> would behave as if
950 <code>protocol=https
</code> and
<code>host=example.com
</code> had been provided). This
951 can help callers avoid parsing URLs themselves.
953 <div class=
"paragraph"><p>Note that specifying a protocol is mandatory and if the URL
954 doesn
’t specify a hostname (e.g.,
"cert:///path/to/file") the
955 credential will contain a hostname attribute whose value is an
956 empty string.
</p></div>
957 <div class=
"paragraph"><p>Components which are missing from the URL (e.g., there is no
958 username in the example above) will be left unset.
</p></div>
961 <code>wwwauth[]
</code>
965 When an HTTP response is received by Git that includes one or more
966 <em>WWW-Authenticate
</em> authentication headers, these will be passed by Git
967 to credential helpers.
969 <div class=
"paragraph"><p>Each
<em>WWW-Authenticate
</em> header value is passed as a multi-valued
970 attribute
<em>wwwauth[]
</em>, where the order of the attributes is the same as
971 they appear in the HTTP response. This attribute is
<em>one-way
</em> from Git
972 to pass additional information to credential helpers.
</p></div>
975 <div class=
"paragraph"><p>Unrecognised attributes are silently discarded.
</p></div>
979 <h2 id=
"_git">GIT
</h2>
980 <div class=
"sectionbody">
981 <div class=
"paragraph"><p>Part of the
<a href=
"git.html">git(
1)
</a> suite
</p></div>
985 <div id=
"footnotes"><hr /></div>
987 <div id=
"footer-text">
989 2023-
10-
23 14:
43:
46 PDT