Skip to content

Git remotes should support HTTP Bearer authentication with OAuth token

GitLab's HTTPS remotes support only Basic authentication.

> http -h "https://gitlab.com/gitlab-org/gitlab.git/info/refs?service=git-receive-pack"
...
WWW-Authenticate: Basic realm="GitLab"

It would be nice to also support Bearer authentication with PAT or OAuth token. This is how OAuth is supposed to work. It's simpler for credential helpers because Bearer auth doesn't require a username.

Git supports Bearer authentication since Git 2.46 https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.0.txt

Edited by M Hickford