pub(crate) fn git_credential(
auth_file: &str,
user: Option<&str>,
operation: &str,
) -> !Expand description
choir git-credential <auth-file> [--auth-user <name>] <operation>
A git credential helper, so a token reaches git over stdin instead of living in a remote URL.
A URL-embedded credential is written into .git/config, echoed by
git remote -v, and copied into every shell history and bug report
that quotes a clone line. Git’s helper protocol exists to avoid
exactly that: git runs the helper as a subprocess, writes the request
as key=value lines on stdin, and reads the answer the same way.
Configure it once per checkout:
git config credential.helper '!choir git-credential ~/.choir/auth'store and erase are accepted and do nothing, deliberately. The
auth file is written by choir join and owned by the contributor;
a helper that honoured erase would let a routine authentication
failure delete the credential the operator issued once.