[jira] [Commented] (MYNEWT-851) newt - Private repo password displayed by `git remote -v`

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/MYNEWT-851?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16208557#comment-16208557 ] 

ASF subversion and git services commented on MYNEWT-851:
--------------------------------------------------------

Commit ea2a9acd2c4aad0a3b79ff8f952e32c2e9df213e in mynewt-newt's branch refs/heads/master from [~ccollins476]
[ https://gitbox.apache.org/repos/asf?p=mynewt-newt.git;h=ea2a9ac ]

MYNEWT-851 newt - Repo pw shown in `git remote -v`

-Prior to commit-

For private repos, the user's login and password are part of the repo
URL. E.g.,

    wes@~/dev/work/repos/private-repo$ git remote -v
    origin    https://wes3:[password-redacted]@github.com/PrivateRepo/private-repo.git (fetch)
    origin    https://wes3:[password-redacted]@github.com/PrivateRepo/private-repo.git (push)

-After commit-

Newt wraps all git commands that require remote access as follows:

1. Replace remote URL with the authentication-decorated version.
2. Perform git operation.
3. Replace remote URL with unauthenticated version.


> newt - Private repo password displayed by `git remote -v`
> ---------------------------------------------------------
>
>                 Key: MYNEWT-851
>                 URL: https://issues.apache.org/jira/browse/MYNEWT-851
>             Project: Mynewt
>          Issue Type: Bug
>      Security Level: Public(Viewable by anyone) 
>          Components: Newt
>            Reporter: Christopher Collins
>            Assignee: Christopher Collins
>             Fix For: v1.3
>
>
> (Pull request: https://github.com/apache/mynewt-newt/pull/101)
> For private repos, the user's login and password are part of the repo URL.  E.g.,
> {noformat}
> wes@~/dev/work/repos/private-repo$ git remote -v
> origin    https://wes3:[password-redacted]@github.com/PrivateRepo/private-repo.git (fetch)
> origin    https://wes3:[password-redacted]@github.com/PrivateRepo/private-repo.git (push)
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)