git
can store the passwords by itself, but more interestingly it can delegate the password management in third-party utilities.
Specifically in the case of git
running on MacOS, credential management usually relies on osxkeychain
*, an utility that stores the repository domain and credentials in the builtin password management system: Keychain.
So every time git
is asked to perform an operation on a given repository, it will ask osxkeychain
to obtain the credentials for that repository domain. If found it will use them, and if not it will prompt the username and password (usually the first time the user access a repository in a git server).
So let's say you start working with a new git server, as for instance bitbucket.org, and you try to clone by the very first time a repository by running the command "git clone https://bitbucket.org/my-company/my-repo
".
git
will ask osxkeychain
to get the credentials used for the server https://bitbucket.org. As Keychain doesn't contain those credentials yet, git
will prompt the user for a username and a password and will ask osxkeychain
to store them in Keychain.
Once stored, git
will be able to retrieve them from Keychain every time an operation on https://bitbucket.org was performed, and so it will not ask for them again.
The credentials will be available by opening the Keychain app and then searching for entries containing the string "bitbucket.org". And "available" will mean that they will be not only readable but also editable, so in case of changing them in the Git server (in this case bitbucket.org), it will be possible to update them locally via Keychain.
Specifically for the case of Bitbucket deprecating the Atlasian account password credentials in favor of app credentials (something to happen on March 1st 2022), it will simply be necessary generating an app password as described here and then manually replacing the password stored in Keychain (deprecated account password) with the newly generated one (app password).
(*) To verify what third-party utility git
uses for managing credentials, run the command "git config credential.helper
".
Comentarios
Publicar un comentario