Something went wrong. Try again.
An unofficial terminal client for Tangled, optimized for humans and agents. tgcli.wisp.place
Something went wrong. Try again.
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687package cli
import ( "bufio" "fmt" "io" "strings"
"github.com/alyraffauf/tg/internal/app" "github.com/spf13/cobra")
func newAuthGitCredentialCommand(service *app.Service) *cobra.Command { return &cobra.Command{ Use: "git-credential <operation>", Short: "Authenticate HTTPS pushes from Git", Long: `Use tg as a Git credential helper for HTTPS pushes.
Configure Git to call tg for tangled.org:
git config --global credential."https://tangled.org".helper "!tg auth git-credential"
Then use an HTTPS remote:
git remote set-url origin https://tangled.org/<repo-did>
tg returns a short-lived token for the repository's Knot. It does not store thetoken.`, Args: cobra.ExactArgs(1), RunE: func(cmd *cobra.Command, args []string) error { switch args[0] { case "get": return gitCredentialGet(cmd, service) case "store", "erase": return nil default: return fmt.Errorf("unknown git-credential operation %q (want get, store, or erase)", args[0]) } }, }}
func gitCredentialGet(cmd *cobra.Command, service *app.Service) error { credentialAttributes, err := readCredentialInput(cmd.InOrStdin()) if err != nil { return err } if !isHTTPSCredentialRequest(credentialAttributes) { return nil } credentials, err := service.GitPushToken(cmd.Context(), credentialAttributes["host"]) if err != nil { return err } if !credentials.MatchesRequestedHost { return nil } out := cmd.OutOrStdout() if credentials.Handle != "" { fmt.Fprintf(out, "username=%s\n", credentials.Handle) } fmt.Fprintf(out, "password=%s\n", credentials.Token) fmt.Fprintln(out) return nil}
// readCredentialInput parses git's key=value credential attributes from stdin,// stopping at a blank line or EOF.func readCredentialInput(input io.Reader) (map[string]string, error) { credentialAttributes := make(map[string]string) scanner := bufio.NewScanner(input) for scanner.Scan() { line := scanner.Text() if line == "" { break } if key, value, ok := strings.Cut(line, "="); ok { credentialAttributes[key] = value } } return credentialAttributes, scanner.Err()}
func isHTTPSCredentialRequest(credentialAttributes map[string]string) bool { return strings.EqualFold(credentialAttributes["protocol"], "https") && strings.TrimSpace(credentialAttributes["host"]) != ""}