NEW 241658
git webkit setup asks for api.github.com keychain access four times 
https://bugs.webkit.org/show_bug.cgi?id=241658
Summary git webkit setup asks for api.github.com keychain access four times
Alexey Proskuryakov
Reported 2022-06-15 17:39:40 PDT
When I re-run `git webkit setup` to renew a GitHub access token, I'm asked to allow Python access to api.github.com in Keychain four times. This is very annoying, as I need to type my password every time. There is an "always allow" option, but that's super insecure, as any python script would then have the access.
Attachments
Add attachment proposed patch, testcase, etc.
Radar WebKit Bug Importer
Comment 1 2022-06-22 17:40:13 PDT
<rdar://problem/95736776>
Elliott Williams
Comment 2 2023-09-21 11:04:25 PDT
One way we could work around this is by building a helper program that does the keychain access on behalf of git-webkit. I spent some time hacking on a little Swift program that would facilitate this months ago, but never finished: https://github.com/emw-apple/WebKit/tree/wip-git-webkit-credentials-program/Tools/git-webkit-credentials
Alexey Proskuryakov
Comment 3 2023-09-21 12:33:03 PDT
We'd probably want git-webkit itself to be binary, for better security. It can call out to the existing script as necessary, so we don't need to rewrite it all. One question is how to actually get it signed.
Note You need to log in before you can comment on or make changes to this bug.