Struct GitCredentialHelper 

pub struct GitCredentialHelper { /* private fields */ }

Shells out to the git binary’s credential subsystem.

git_program defaults to "git". Override for tests via Self::with_program — point at a fake git that records its input or scripts a response.

protect_protocol mirrors credential.protectProtocol (default true). When set, every value written to git credential stdin is rejected if it contains a carriage return — preventing newline-based protocol smuggling. Newlines and null bytes are rejected unconditionally regardless of this flag.

Implementations

impl GitCredentialHelper

pub fn new() -> Self

Build a helper that shells out to the system git binary.

pub fn with_program(git_program: impl Into<String>) -> Self

Build the helper around a custom git-compatible binary.

Used by the integration tests, which point at a shell script that fakes the protocol.

pub fn with_protect_protocol(self, protect: bool) -> Self

Toggle credential.protectProtocol for this helper.

Default is true. Pass false only when the user has explicitly opted out; carriage returns in URLs are otherwise a known smuggling vector.

Trait Implementations

impl Clone for GitCredentialHelper

fn clone(&self) -> GitCredentialHelper

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GitCredentialHelper

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GitCredentialHelper

fn default() -> Self

Returns the “default value” for a type.

impl Helper for GitCredentialHelper

fn fill(&self, query: &Query) -> Result<Option<Credentials>, HelperError>

Try to fetch credentials for query.

fn approve(&self, query: &Query, creds: &Credentials) -> Result<(), HelperError>

Tell the helper that creds worked for query.

fn reject(&self, query: &Query, creds: &Credentials) -> Result<(), HelperError>

Tell the helper that creds did not work for query.