From: Tom S <toms@gentuity.com>
Date: Thu, 24 Apr 2025 22:13:24 GMT
Subject: Obscured (overwritten) second prompt for credentials during clone operation
Message-ID: <SA1PR16MB613444332129B96B51EF1D27B9852@SA1PR16MB6134.namprd16.prod.outlook.com>

While cloning a repo through HTTPS from a locally-hosted GitLab server, I was prompted a second time for credentials, but the prompt was mostly obscured by other Git output. The only visible sign that a prompt was present was ".ocal':" on the line that starts with "Updating files". This repo uses Git LFS, and I suspect but do not know for a fact that the second prompt is related to pulling LFS content. By typing the username I was able to elicit the second prompt for a password, and it does work, but the first time through I missed this detail and the clone operation did not succeed.

Assuming a second prompt is necessary, I would expect this second prompt for Username to appear on its own line without being overwritten by other Git output nor advancing the cursor to subsequent lines.

$ git clone -c http.sslCAInfo=/.../<redacted>.pem https://<redacted>.local/sw/<redacted>.git
Cloning into '<redacted>'...
Username for 'https://<redacted>.local': <redacted>
Password for 'https://<redacted>@<redacted>.local':
remote: Enumerating objects: 179533, done.
remote: Counting objects: 100% (179533/179533), done.
remote: Compressing objects: 100% (34949/34949), done.
remote: Total 179533 (delta 144313), reused 179448 (delta 144269), pack-reused 0 (from 0)
Receiving objects: 100% (179533/179533), 870.75 MiB | 13.79 MiB/s, done.
Resolving deltas: 100% (144313/144313), done.
Updating files: 100% (2881/2881), done.ocal': Updating files:  95% (2737/2881)
<redacted username>
Password for 'https://<redacted>@<redacted>.local':

I observed this with Git 2.49.0 with Fedora 42 on x64 using the default Gnome Terminal plus tmux.

Regards,
Tom