git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: The enduring popularity of git-credential-store

From
M Hickford <mirth.hickford@gmail.com>
Date
Feb 11, 2023, 07:11 UTC
Message-ID
<CAGJzqsk=vbyrzeeq091RcKFmprpFaukFbcO9ctV1ti5vr-95ig@mail.gmail.com>
In-Reply-To
<Y2p4rhiOphuOM0VQ@coredump.intra.peff.net>
On Tue, 8 Nov 2022 at 15:41, Jeff King <peff@peff.net> wrote:
Show 14 quoted lines
>
> On Tue, Nov 08, 2022 at 10:50:33AM +0000, M Hickford wrote:
>
> > Secondly, the docs recommend git-credential-cache [2] which ships with
> > Git and is equally easy to configure. So why isn't it more popular? My
> > hypothesis: while caching works great for passwords typed from memory,
> > the combination of caching with personal access tokens has poor
> > usability. The unmemorised token is lost when the cache expires, so
> > the user has to generate a new token every session. I suspect GitHub's
> > 2021 decision to stop accepting passwords [4] may have inadvertently
> > pushed users from 'cache' to 'store'.
>
> Another big problem with credential-cache is that it requires Unix
> sockets, so it doesn't run on Windows.

Thanks to the work of Carlo Marcelo Arenas Belón [1], credential-cache *can* be built on Windows 10 April 2018 update or later. But Git for Windows has to support older Windows versions for many more years so the build flag can't be enabled. Perhaps Git for Windows could ship with a credential-cache binary that works on Windows 10 and gracefully degrades on older Windows versions? That's beyond my expertise. Help very welcome at https://github.com/git-for-windows/git/issues/3892

Might this be suitable for a GSoC project? If a mentor could be found.
[1] https://lore.kernel.org/git/20210914072600.11552-1-carenas@gmail.com/
Previous: Taylor BlauNext: brian m. carlson
Message 5 of 13 in “The enduring popularity of git-credential-store”
  1. M HickfordNov 8, 2022
  2. Michal SuchánekNov 8, 2022
  3. Jeff KingNov 8, 2022
  4. Taylor BlauNov 8, 2022
  5. M HickfordFeb 11, 2023
  6. brian m. carlsonNov 8, 2022
  7. M HickfordNov 12, 2022
  8. Matthew John CheethamNov 17, 2022
  9. Jeff KingNov 17, 2022
  10. Lessley DenningtonNov 17, 2022
  11. Jeff KingNov 17, 2022
  12. M HickfordMay 29, 2023
  13. M HickfordMay 28, 2023

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.