implemented 02-git-gateway.md: added Git access layer with credentials bridge, duration parser, and extensive tests

2026-07-07 07:10:38 +02:00
parent f4a6ec9194
commit a427665ce8
11 changed files with 707 additions and 23 deletions
@@ -0,0 +1,51 @@
+package de.hoennig.gittally.git
+
+import java.nio.file.Files
+import java.nio.file.attribute.PosixFilePermissions
+
+/**
+ * Credential bridge for git HTTPS authentication via `GIT_ASKPASS`.
+ *
+ * The script itself contains no secrets; credentials are passed through
+ * process environment variables so they never touch the filesystem.
+ */
+object GitAskPass {
+    val SCRIPT: String =
+        """
+        #!/bin/sh
+        case "${'$'}1" in
+            *[Uu]sername*)
+                printf '%s\n' "${'$'}GITTALLY_GIT_ACCOUNT"
+                ;;
+            *)
+                printf '%s\n' "${'$'}GITTALLY_GIT_TOKEN"
+                ;;
+        esac
+        """.trimIndent() + "\n"
+
+    fun <T> withAskPass(
+        account: String,
+        token: String,
+        block: (environment: Map<String, String>) -> T,
+    ): T {
+        val script =
+            Files.createTempFile(
+                "gittally-askpass",
+                ".sh",
+                PosixFilePermissions.asFileAttribute(PosixFilePermissions.fromString("rwx------")),
+            )
+        try {
+            Files.writeString(script, SCRIPT)
+            return block(
+                mapOf(
+                    "GIT_ASKPASS" to script.toAbsolutePath().toString(),
+                    "GIT_TERMINAL_PROMPT" to "0",
+                    "GITTALLY_GIT_ACCOUNT" to account,
+                    "GITTALLY_GIT_TOKEN" to token,
+                ),
+            )
+        } finally {
+            Files.deleteIfExists(script)
+        }
+    }
+}