feat: switch to git credential auth, remove token management#136
Closed
rhuanbarreto wants to merge 1 commit into
Closed
feat: switch to git credential auth, remove token management#136rhuanbarreto wants to merge 1 commit into
rhuanbarreto wants to merge 1 commit into
Conversation
Replace archgate-specific token authentication with git credential helpers. Users now authenticate to the plugin service using their existing GitHub credentials (PAT/OAuth token via git credential helpers like gh auth login). Changes: - Remove token claiming (claimArchgateToken) and credential storage - StoredCredentials now stores only github_user (no token) - Plugin URLs are bare (no embedded credentials) - Claude Code/Copilot CLI rely on git credential helpers - Cursor plugin install prompts for GitHub credentials - Login flow simplified to registration only Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Deploying archgate-cli with
|
| Latest commit: |
c1ea12a
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://ef73eae6.archgate-cli.pages.dev |
| Branch Preview URL: | https://feat-git-credential-auth.archgate-cli.pages.dev |
Contributor
Author
|
Superseded — pivoting to Bun.secrets-based credential storage instead of removing tokens |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
ag_beta_tokens in plugin URLsgh auth login, macOS Keychain)archgate loginstill uses GitHub Device Flow but only for signup verification, not token claimingDetails
What Changed
StoredCredentials{ token, github_user, created_at }{ github_user, created_at }https://user:ag_beta_token@plugins.archgate.dev/archgate.githttps://plugins.archgate.dev/archgate.gitarchgate plugin urlFiles Changed
src/helpers/auth.ts— RemoveclaimArchgateToken,checkRegistration; simplifyStoredCredentialssrc/helpers/plugin-install.ts— Remove credentials from URLs;buildMarketplaceUrl()takes no argssrc/helpers/login-flow.ts— Remove token claiming; simplified to registration onlysrc/helpers/signup.ts— RemovetokenfromSignupResultsrc/commands/login.ts— Updated messaging (registered vs logged in)src/commands/plugin/install.ts— No stored credentials needed; Cursor prompts for GitHub credentialssrc/commands/plugin/url.ts— No longer requires loginsrc/helpers/init-project.ts— Updated to use parameterless URL buildersCompanion PR
Test plan
archgate loginregisters user successfullyarchgate plugin installworks with git credential helpersarchgate plugin install --editor cursorprompts and downloads🤖 Generated with Claude Code