git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: bearer token authorization with HTTPS transport

From
brian m. carlson <sandals@crustytoothpaste.net>
Date
Jan 6, 2015, 02:41 UTC
Message-ID
<20150106024123.GF1025060@vauxhall.crustytoothpaste.net>
In-Reply-To
<20141231014209.GA8789@peff.net>
On Tue, Dec 30, 2014 at 08:42:10PM -0500, Jeff King wrote:
Show 8 quoted lines
>Another option would be to just teach the credential code to accept a
>"bearer" field from a credential helper. We would need to:
>
>  1. Teach the credential code that getting a "bearer" token is
>     sufficient (it does not need to prompt for username/password).
>
>  2. Teach the http code to pull the bearer field out and stick it in an
>     "Authorization" header.

For the benefit of someone trying to implement this, libcurl has the CURLOPT_XOAUTH2_BEARER option. It does requires libcurl 7.33, though.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
Previous: Jeff KingNext: David Renshaw
Message 5 of 6 in “bearer token authorization with HTTPS transport”
  1. David RenshawDec 30, 2014
  2. brian m. carlsonDec 30, 2014
  3. Jeff KingDec 31, 2014
  4. Jeff KingDec 31, 2014
  5. brian m. carlsonJan 6, 2015
  6. David RenshawJan 6, 2015

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.