Issue #9855 resolved

Make Raw Repository Requests on Private Repos Respect OAuth

stephensearles
created an issue

Requests like:

GET https://bitbucket.org/user/repo.git/info/refs?service=git-upload-pack

This works if you set your User-Agent to something that looks like git, and if you use Basic Authentication.

Can this type of request be made to work with OAuth?

Comments (3)

  1. stephensearles reporter

    That's unfortunate. It would be prohibitively difficult to mimic raw git communication with your public API.

    Allowing OAuth for git communication would be ideal for allowing tools to work with bitbucket private repositories. For example, I'm extending go get for this, but as it stands, we have to choose between punching through bitbucket's user-level security (with a user that has global access to our team's repos), or asking people for their bitbucket password.

  2. Log in to comment