CODEWITHSUNDEEP
gitgithubsshhttp-headershttp-proxy
Solerus
Solerus

Reputation: 33

Use http proxy for git repository authentication

Let's imagine the current scenario :

We have a Github repository account, the repo, protected both by a password and an ssh key. We have an http proxy which possesses both the correct password and ssh key to access a repo under the account. Finally we have a worker which posses neither the password or the key but can access the proxy.

Is there a way to hijack the http requests from the workers at the http proxy and then add the authentication needed without the knowledge of the worker, letting them thus access the repo without having access to the authentication methods?

Thanks in advance, any help really appreciated !

Upvotes: 1

Views: 417

Answers (1)

VonC
VonC

Reputation: 1324327

A GitHub repository is not password protected: its owner account is.
An SSH key might have an associated passphrase.

Normally, an HTTP proxy is used for HTTPS queries, not SSH URLs.
It is true you can do SSH access through HTTP proxy, but the user would be:

  • without the private SSH key
  • without the GitHub account password
  • with no collaboration right over the repository (meaning, they are not declared as collaborator)

Such a user would not be able to access the repository at all.

As mentioned in the comments, you would need to deploy your own proxy to add authentication headers to the client query.

Upvotes: 1

Related Questions