From: Johannes Schindelin <johannes.schindelin@gmx.de>
Date: Sat, 29 Sep 2007 23:40:41 GMT
Subject: Re: [PATCH] Fix problem with authentification on http repository.
Message-ID: <Pine.LNX.4.64.0709300039430.28395@racer.site>
In-Reply-To: <7v8x6pjb4c.fsf@gitster.siamese.dyndns.org>

Hi,

On Sat, 29 Sep 2007, Junio C Hamano wrote:

> jean.guyader@linkea.org writes:
> 
> > From: Jean Guyader <jean.guyader@gmail.com>
> >
> > Curl uses the option -u user:passwd and not the user:password
> > given in the url.
> > The solution was to extract user:password from the url and set
> > the option.
> >
> > Here the regex used :
> >         sed -re 's-.*http://([^:]*):([^@]+)@.*-\1:\2-g'
> 
> This is more like "allowing embedded authentication credentials
> in URL for http transport".
> 
> We never supported URLs with embedded credentials (see
> Documentation/urls.txt), partly because nobody asked for it, but
> more importantly because giving -n to curl to have it read from
> user's .netrc is generally much more preferred approach.

To elaborate on that: if you fetch from somewhere, your url, username and 
password can be read from the output of "ps ax | grep http" very easily.

Ciao,
Dscho