ungit icon indicating copy to clipboard operation
ungit copied to clipboard

ungit keeps asking authorization on all remotes

Open alexandre1985 opened this issue 6 years ago • 3 comments

I can't use ungit because when I run ungit it keeps on asking for passwords on all remotes that I have.

  1. It should ask only on the remote that I specified.
  2. After I put the password it keeps on asking for a password again and again.
  3. With my ssh remote there should be a way to insert my key passphrase through ungit

After the incessant passwords asks that it gives me and ungit not being satisfied I refuse to put a my password and then it gives me the error that it can't run the comand:

-c color.ui=false -c core.quotepath=false -c core.pager=cat -c credential.helper=/home/daniel/n/lib/node_modules/ungit/bin/credentials-helper 0 8448 http ls-remote --tags http

alexandre1985 avatar Apr 20 '18 14:04 alexandre1985

Security is a though problem. Ungit doesn't cache or store any credentials or passwords and does not directly authentication, all it does is relay given authentication un and pw to git. This is to ensure that Ungit to never be a source of security risk and we would have to never worry about storing credentials.

There are couple of options.

  • enable git credential caching
  • if mac, I think you can add credential to mac keychain and mac os can handle auth
  • if you do ssh auth, you could store private key in the ~/.ssh

let me know if this helps.

jung-kim avatar Apr 29 '18 00:04 jung-kim

@jung-kim This works, thx.

But its quite frustrating that we need to enable git config credential.helper cache, when we enter password in real time using GUI

Can ungit auto enable it if ungit need to use it? e.g. git config credential.helper 'cache --timeout=' ?

wonson avatar Jun 22 '18 03:06 wonson

Rather then giving GUI pop ups, I think it would be much more convenient to have a whole terminal instance at bottom like VSCODE/atom. In this way all things will be visible in a single app. Storing pass is dangerous.

cgvirus avatar Dec 16 '20 22:12 cgvirus