Problem: if no git credential helper is configured, login and submit silently fail to persist credentials. Solution: add `has_helper()` to `git_credential.lua` that checks `git config credential.helper`. Guard the top of `login()`, `logout()`, and `submit()` with an early-return error. Add a healthcheck warning when no helper is configured. Add LuaCATS annotations to all `git_credential` functions.
130 lines
3.5 KiB
Lua
130 lines
3.5 KiB
Lua
local M = {}
|
|
|
|
local HOSTS = {
|
|
atcoder = 'atcoder.jp',
|
|
codechef = 'www.codechef.com',
|
|
codeforces = 'codeforces.com',
|
|
cses = 'cses.fi',
|
|
kattis = 'open.kattis.com',
|
|
usaco = 'usaco.org',
|
|
}
|
|
|
|
local _helper_checked = false
|
|
local _helper_ok = false
|
|
|
|
---@return boolean
|
|
function M.has_helper()
|
|
if not _helper_checked then
|
|
local r = vim
|
|
.system({ 'git', 'config', 'credential.helper' }, { text = true, timeout = 5000 })
|
|
:wait()
|
|
_helper_ok = r.code == 0 and r.stdout ~= nil and vim.trim(r.stdout) ~= ''
|
|
_helper_checked = true
|
|
end
|
|
return _helper_ok
|
|
end
|
|
|
|
---@param host string
|
|
---@param extra? table<string, string>
|
|
---@return string
|
|
local function _build_input(host, extra)
|
|
local lines = { 'protocol=https', 'host=' .. host }
|
|
if extra then
|
|
for k, v in pairs(extra) do
|
|
table.insert(lines, k .. '=' .. v)
|
|
end
|
|
end
|
|
table.insert(lines, '')
|
|
table.insert(lines, '')
|
|
return table.concat(lines, '\n')
|
|
end
|
|
|
|
---@param stdout string
|
|
---@return table<string, string>
|
|
local function _parse_output(stdout)
|
|
local result = {}
|
|
for line in stdout:gmatch('[^\n]+') do
|
|
local k, v = line:match('^(%S+)=(.+)$')
|
|
if k and v then
|
|
result[k] = v
|
|
end
|
|
end
|
|
return result
|
|
end
|
|
|
|
---@param platform string
|
|
---@return { username: string, password: string, token?: string }?
|
|
function M.get(platform)
|
|
local host = HOSTS[platform]
|
|
if not host then
|
|
return nil
|
|
end
|
|
|
|
local input = _build_input(host)
|
|
local obj = vim
|
|
.system({ 'git', 'credential', 'fill' }, { stdin = input, text = true, timeout = 5000 })
|
|
:wait()
|
|
if obj.code ~= 0 then
|
|
return nil
|
|
end
|
|
|
|
local parsed = _parse_output(obj.stdout or '')
|
|
if not parsed.username or not parsed.password then
|
|
return nil
|
|
end
|
|
|
|
local creds = { username = parsed.username, password = parsed.password }
|
|
|
|
if platform == 'cses' then
|
|
local token_input = _build_input(host, { path = 'api-token' })
|
|
local token_obj = vim
|
|
.system({ 'git', 'credential', 'fill' }, { stdin = token_input, text = true, timeout = 5000 })
|
|
:wait()
|
|
if token_obj.code == 0 then
|
|
local token_parsed = _parse_output(token_obj.stdout or '')
|
|
if token_parsed.password then
|
|
creds.token = token_parsed.password
|
|
end
|
|
end
|
|
end
|
|
|
|
return creds
|
|
end
|
|
|
|
---@param platform string
|
|
---@param creds { username: string, password: string, token?: string }
|
|
function M.store(platform, creds)
|
|
local host = HOSTS[platform]
|
|
if not host then
|
|
return
|
|
end
|
|
|
|
local input = _build_input(host, { username = creds.username, password = creds.password })
|
|
vim.system({ 'git', 'credential', 'approve' }, { stdin = input, text = true }):wait()
|
|
|
|
if platform == 'cses' and creds.token then
|
|
local token_input =
|
|
_build_input(host, { path = 'api-token', username = creds.username, password = creds.token })
|
|
vim.system({ 'git', 'credential', 'approve' }, { stdin = token_input, text = true }):wait()
|
|
end
|
|
end
|
|
|
|
---@param platform string
|
|
---@param creds { username: string, password: string, token?: string }
|
|
function M.reject(platform, creds)
|
|
local host = HOSTS[platform]
|
|
if not host or not creds then
|
|
return
|
|
end
|
|
|
|
local input = _build_input(host, { username = creds.username, password = creds.password })
|
|
vim.system({ 'git', 'credential', 'reject' }, { stdin = input, text = true }):wait()
|
|
|
|
if platform == 'cses' and creds.token then
|
|
local token_input =
|
|
_build_input(host, { path = 'api-token', username = creds.username, password = creds.token })
|
|
vim.system({ 'git', 'credential', 'reject' }, { stdin = token_input, text = true }):wait()
|
|
end
|
|
end
|
|
|
|
return M
|