>>>>> "Ted" == Ted Zlatanov <[email protected]> writes:

> I wanted to suggest that on GNU Emacs Magit could use
> `auth-source-search' (see (info "auth") for details) to retrieve user
> passwords for such interactive prompts.  auth-source.el works in XEmacs
> too; it's part of Gnus right now but can be unbundled if you want to use
> it there.  `magit-password' can then be modified to use the matched
> string data (key name or user@host) for the search.

> Obviously a .netrc file could do this too, but it's much less secure.
> auth-source.el supports GPG-encrypted netrc files and can store and
> retrieve passwords in the very secure Secrets API.  It can also prompt
> if the password is not found.

> Let me know if anyone is interested and I can provide a patch.

Hi Ted,

thanks for the offer. I, for one, would be very interested to see how
it's done and to work with you on integrating it properly if need be.
Our current way of handling authentication is quite limited
and I suspect most of us just use ssh-agent to workaround the problem.

I don't think we want to provide auth-source.el ourselves, just using it
when available should be sufficient as it's been around in GNU Emacs for
a while now (we can document the steps to make it available
though). That said, I think it would be a good idea in general to make
it fully separate from Gnus :)

As a side note, I'm working on a GitHub API to prepare the ground for
future Magit extensions, and I'd be more than happy to delegate
authentication handling to auth-source.el as well :)

Thanks,

Yann.

-- 
We tend to become like the worst in those we oppose.

  -- Bene Gesserit Coda

Reply via email to