Git save credentials windows

If you use the SSH transport for connecting to remotes, it’s possible for you to have a key without a passphrase, which allows you to securely transfer data without typing in your username and password.
However, this isn’t possible with the HTTP protocols — every connection needs a username and password.
This gets even harder for systems with two-factor authentication, where the token you use for a password is randomly generated and unpronounceable.

Fortunately, Git has a credentials system that can help with this.
Git has a few options provided in the box:

You can choose one of these methods by setting a Git configuration value:

$ git config --global credential.helper cache

Some of these helpers have options.
The “store” helper can take a --file <path> argument, which customizes where the plain-text file is saved (the default is ~/.git-credentials).
The “cache” helper accepts the --timeout <seconds> option, which changes the amount of time its daemon is kept running (the default is “900”, or 15 minutes).
Here’s an example of how you’d configure the “store” helper with a custom file name:

$ git config --global credential.helper 'store --file ~/.my-credentials'

Git even allows you to configure several helpers.
When looking for credentials for a particular host, Git will query them in order, and stop after the first answer is provided.
When saving credentials, Git will send the username and password to all of the helpers in the list, and they can choose what to do with them.
Here’s what a .gitconfig would look like if you had a credentials file on a thumb drive, but wanted to use the in-memory cache to save some typing if the drive isn’t plugged in:

[credential]
    helper = store --file /mnt/thumbdrive/.git-credentials
    helper = cache --timeout 30000

$ git credential fill (1)
protocol=https (2)
host=mygithost
(3)
protocol=https (4)
host=mygithost
username=bob
password=s3cre7
$ git credential fill (5)
protocol=https
host=unknownhost

Username for 'https://unknownhost': bob
Password for 'https://bob@unknownhost':
protocol=https
host=unknownhost
username=bob
password=s3cre7

$ git credential-store --file ~/git.store store (1)
protocol=https
host=mygithost
username=bob
password=s3cre7
$ git credential-store --file ~/git.store get (2)
protocol=https
host=mygithost

username=bob (3)
password=s3cre7

https://bob:s3cre7@mygithost

#!/usr/bin/env ruby

require 'optparse'

path = File.expand_path '~/.git-credentials' # (1)
OptionParser.new do |opts|
    opts.banner = 'USAGE: git-credential-read-only [options] <action>'
    opts.on('-f', '--file PATH', 'Specify path for backing store') do |argpath|
        path = File.expand_path argpath
    end
end.parse!

exit(0) unless ARGV[0].downcase == 'get' # (2)
exit(0) unless File.exist? path

known = {} # (3)
while line = STDIN.gets
    break if line.strip == ''
    k,v = line.strip.split '=', 2
    known[k] = v
end

File.readlines(path).each do |fileline| # (4)
    prot,user,pass,host = fileline.scan(/^(.*?):\/\/(.*?):(.*?)@(.*)$/).first
    if prot == known['protocol'] and host == known['host'] and user == known['username'] then
        puts "protocol=#{prot}"
        puts "host=#{host}"
        puts "username=#{user}"
        puts "password=#{pass}"
        exit(0)
    end
end

$ git credential-read-only --file=/mnt/shared/creds get
protocol=https
host=mygithost
username=bob

protocol=https
host=mygithost
username=bob
password=s3cre7

$ git config --global credential.helper 'read-only --file /mnt/shared/creds'

Last Updated :
11 Jun, 2024

Managing credentials efficiently is important for seamless interaction with remote Git repositories. By default, Git prompts for a username and password each time you interact with a remote repository. To simplify this process, you can configure Git to save your credentials, allowing for a smoother workflow. This article will guide you through various methods to save your username and password in Git.

Prerequisites

Before proceeding, ensure you have the following:

• Git Installed: Make sure Git is installed on your system. You can download it from Git’s official website.
• Access to a Remote Repository: Ensure you have access to a remote repository where you need to save your credentials.

Methods to Save Credentials

Method 1. Using Git Credential Helper

Git includes a credential helper that can save your credentials. There are different types of credential helpers, including:

1. cache Helper

The cache helper temporarily stores your credentials in memory for a configurable period.

• Set Up Cache Helper: Configure Git to use the cache helper with a timeout (e.g., 3600 seconds = 1 hour):

git config --global credential.helper 'cache --timeout=3600'

2. store Helper

The store helper saves your credentials in a plain-text file on disk.

• Set Up Store Helper: Configure Git to use the store helper:

git config --global credential.helper store

• First Usage: The first time you push or pull, Git will ask for your username and password and store them in ~/.git-credentials.

3. manager-core (Windows and macOS) / osxkeychain (macOS) / libsecret (Linux)

These helpers store credentials securely in the OS-specific credential storage.

For Windows

git config --global credential.helper manager-core

For macOS:

git config --global credential.helper osxkeychain

For Linux:

git config --global credential.helper libsecret

Картинка с сайта: www.geeksforgeeks.org

Method 2. Saving Credentials for HTTPS Repositories

If you are working with HTTPS repositories, you can directly save the username and password in the repository URL. However, this method is not recommended due to security risks.

• Clone Repository with Credentials:

git clone https://username:password@github.com/username/repository.git

• Update Remote URL with Credentials:

git remote set-url origin https://username:password@github.com/username/repository.git

Warning: Storing credentials in URLs is insecure and should be avoided whenever possible.

Method 3: Using SSH Keys

A more secure and recommended method is to use SSH keys instead of saving plain-text credentials.

• Generate SSH Key:

ssh-keygen -t rsa -b 4096 -C "your_email@example.com"

• Add SSH Key to SSH-Agent:

eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id_rsa

• Add SSH Key to GitHub/GitLab: Copy the contents of ~/.ssh/id_rsa.pub and add it to your GitHub/GitLab account under SSH keys.
• Clone Repository Using SSH:

git clone git@github.com:username/repository.git

Method 4. Using Personal Access Tokens

For increased security, especially with platforms like GitHub, you can use Personal Access Tokens (PATs).

• Generate PAT: Go to your GitHub account settings and generate a PAT with the necessary permissions.
• Use PAT Instead of Password: When prompted for a password, use the PAT instead.

git clone https://github.com/username/repository.git
Username: your_username
Password: your_token

git config --global credential.helper manager

1. How do I save git credential under windows?
2. Git — save username and password with windows
3. How to safely store git credential under windows?
4. Windows and git — save username and password

При работе с закрытыми git репозиториями приходится каждый раз вводить логин и пароль при подключении по SSH. Это связано с тем, что Git не кеширует пользовательские данные. Решить эту проблему можно двумя способами:

• создать ssh ключ и добавить его в профиль git платформы
• сохранить логин и пароль

В это статье рассмотрим второй вариант.

Важно понимать, что логин и пароль будут сохранены в текстовом файле в открытом виде. Этот файл можно открыть текстовым редактором и увидеть все пользовательские данные, поэтому способ не самый безопасный. Тем не менее, если вы работаете один за своим компьютером, то способ вполне рабочий.

Существует два метода хранения пароля:

• cache режим хранит пароль в памяти определенное время (конечный срок)
• store режим сохраняет пароль на постоянной основе

Чтобы сохранять логин и пароль в режиме «cache», используйте команду:

git config --global credential.helper cache --timeout 3600

• git config — команда для настройки
• —global — указываем, что будет настраивать глобально, а не для репозитория
• credential.helper cache — указываем режим хранения данных «cache»
• —timeout — как долго будет хранится пароль (в секундах)

Чтобы сохранять пользовательские данные навсегда, воспользуйтесь командой:

git config --global credential.helper store

• git config — команда для настройки
• —global — указываем, что будет настраивать глобально, а не для репозитория
• credential.helper store — указываем режим хранения данных «store»

По умолчанию пользовательские данные хранятся в файле домашнего каталога пользователя ~/.git-credentials

После выполнения команды нужно ввести логин и пароль (например сделать git pull) и в следующий раз данные для входа не будут запрашиваться.