Ir al contenido principal

Using Bitbucket app passwords with git on MacOS (OSX)

Learn how Bitbucket passwords are stored by git on MacOS.

git can store the passwords by itself, but more interestingly it can delegate the password management in third-party utilities.

Specifically in the case of git running on MacOS, credential management usually relies on osxkeychain*, an utility that stores the repository domain and credentials in the builtin password management system: Keychain.

So every time git is asked to perform an operation on a given repository, it will ask osxkeychain to obtain the credentials for that repository domain. If found it will use them, and if not it will prompt the username and password (usually the first time the user access a repository in a git server).

So let's say you start working with a new git server, as for instance bitbucket.org, and you try to clone by the very first time a repository by running the command "git clone https://bitbucket.org/my-company/my-repo".

git will ask osxkeychain to get the credentials used for the server https://bitbucket.org. As Keychain doesn't contain those credentials yet, git will prompt the user for a username and a password and will ask osxkeychain to store them in Keychain.

Once stored, git will be able to retrieve them from Keychain every time an operation on https://bitbucket.org was performed, and so it will not ask for them again.

The credentials will be available by opening the Keychain app and then searching for entries containing the string "bitbucket.org". And "available" will mean that they will be not only readable but also editable, so in case of changing them in the Git server (in this case bitbucket.org), it will be possible to update them locally via Keychain.

Specifically for the case of Bitbucket deprecating the Atlasian account password credentials in favor of app credentials (something to happen on March 1st 2022), it will simply be necessary generating an app password as described here and then manually replacing the password stored in Keychain (deprecated account password) with the newly generated one (app password).

(*) To verify what third-party utility git uses for managing credentials, run the command "git config credential.helper".

Etiquetas:

Comentarios

Publicar un comentario

Entradas populares de este blog

ESlint: Ignore unused underscore variables

Some naming conventions promote the use of the underscore character (" _ ") for those variables that must be declared but are not being used. One common case is that in which a function signature contains some variables that will not be used, as for instance the Express error handlers: app.use(function(err, req, res, next) { console.error(err.stack); res.status(500).send('Something broke!'); }); In the above example only the arguments err and res are being used, though all four must be defined in the handler signature. Thus, following the naming convention of using underscores for those unused variables, we could recode it as: app.use(function(err, _, res, __) { console.error(err.stack); res.status(500).send('Something broke!'); }); Though it makes the function more readable, it comes with a problem if using ESlint: it will blame by declaring unused variables. error '_' is defined but never used error '__' is define...
Publicar un comentario
Leer más

GCloud: Changing the default project (in a nutshell)

gcloud command line tool allow us managing a list of Google Cloud projects, one of which is considered as the default project, so all the operations we perform via gcloud are performed on it. Available projects To check what projects are available via gcloud , run the command: $ gcloud projects list This command drops an output similar to this example: PROJECT_ID NAME PROJECT_NUMBER fooOrg-pr01 Project Bar 239785793387 fooOrg-pr02 Project Zaz 348328582382 ... You can check the available options in the GCloud SDK reference . Current default project As you can see, that output doesn't set what is the default project. To get it run this command: $ gcloud config get-value project The command output will show the ID of the default project. Following the above example, the output of the command could be fooOrg-pr01 to state that the default project is our Project Bar. Changing the current default project To change the default project, run this comman...
Publicar un comentario
Leer más