Re: bearer token authorization with HTTPS transport

2015-01-06 Thread David Renshaw
On Mon, Jan 5, 2015 at 6:41 PM, brian m. carlson wrote: > > For the benefit of someone trying to implement this, libcurl has the > CURLOPT_XOAUTH2_BEARER option. It does requires libcurl 7.33, though. As far as I can tell, libcurl supports this option for IMAP, POP, and SMTP, but not yet for HTT

Re: bearer token authorization with HTTPS transport

2015-01-05 Thread brian m. carlson
On Tue, Dec 30, 2014 at 08:42:10PM -0500, Jeff King wrote: Another option would be to just teach the credential code to accept a "bearer" field from a credential helper. We would need to: 1. Teach the credential code that getting a "bearer" token is sufficient (it does not need to prompt fo

Re: bearer token authorization with HTTPS transport

2014-12-30 Thread Jeff King
On Tue, Dec 30, 2014 at 08:42:09PM -0500, Jeff King wrote: > Both should be pretty trivial. This approach seems conceptually cleaner > to me, though it does mean you could not specify a bearer via the > terminal prompt for a password (e.g., by cutting and pasting from > elsewhere). I don't know if

Re: bearer token authorization with HTTPS transport

2014-12-30 Thread Jeff King
On Tue, Dec 30, 2014 at 11:56:11PM +, brian m. carlson wrote: > On Tue, Dec 30, 2014 at 11:24:09AM -0800, David Renshaw wrote: > > Hi, > > I would like to be able to serve a git repository over HTTPS from a > > web server that requires OAuth2-style bearer tokens for authorization. > > For more

Re: bearer token authorization with HTTPS transport

2014-12-30 Thread brian m. carlson
On Tue, Dec 30, 2014 at 11:24:09AM -0800, David Renshaw wrote: > Hi, > I would like to be able to serve a git repository over HTTPS from a > web server that requires OAuth2-style bearer tokens for authorization. > For more context, see this thread: > https://groups.google.com/forum/#!topic/sandstor

bearer token authorization with HTTPS transport

2014-12-30 Thread David Renshaw
Hi, I would like to be able to serve a git repository over HTTPS from a web server that requires OAuth2-style bearer tokens for authorization. For more context, see this thread: https://groups.google.com/forum/#!topic/sandstorm-dev/4oigfb4-9E4 Does anyone here have any advice about how to convince