git-ecosystem/git-credential-manager
Git Credential Manager
This project is a Git credential helper that automates the storage and retrieval of authentication secrets for remote repository operations. It functions as an OAuth token manager and an operating system vault storage interface to ensure authentication secrets are encrypted at rest.
The tool acts as a cross-platform authentication broker, enabling the sharing of secure credentials between a host operating system and a Linux subsystem. It also serves as an enterprise proxy gateway, routing authentication traffic through corporate proxy servers to reach restricted repository endpoints.
The system manages identity through multi-factor authentication and handles account binding for providers such as GitHub and Azure Repos. It further integrates with native system password managers and provides the ability to validate security certificates for remote hosts.
Features
- Git Credential Helpers - Implements a standardized interface for Git clients to automate the retrieval of authentication secrets.
- Remote Repository Authentication - Automates the storage and retrieval of authentication tokens for remote Git repositories.
- Credential Vaults - Interfaces with the host operating system's built-in encrypted password manager to persist authentication secrets.
- Multi-Factor Authentication - Supports secondary verification flows during the authentication process for remote hosting providers.
- OAuth Authentication - Handles the exchange of authorization codes for long-lived access tokens via OAuth 2.0 flows.
- Repository Credentials - Automates the storage and retrieval of authentication tokens for repositories to eliminate manual logins.
- Native OS Vault Interfaces - Interfaces with native system password managers to ensure authentication secrets are encrypted at rest.
- Secret Management Systems - Provides a system for securely storing and managing authentication secrets using native operating system vaults.
- Inter-Process Communication Bridges - Implements a cross-platform message bridge to synchronize authentication state between a host and a Linux subsystem.
- Cross-OS Credential Bridges - Provides a communication bridge to share secure credentials between a host OS and a Linux subsystem.
- Traffic Routing Proxies - Directs authentication network traffic through intermediary corporate proxy servers to bypass restricted environments.
- Credential Bridging - Enables the sharing of secure credentials between a Windows host and a Linux subsystem for synchronized repository access.
- Enterprise Authentication - Provides enterprise-grade authentication flows and proxy routing to satisfy corporate security policies for repository access.
- Identity-Based Access Brokers - Brokers access to repositories by integrating with the system account manager to satisfy corporate security policies.
- Proxy Gateway Integrations - Routes authentication traffic through corporate proxy gateways to bypass network restrictions.
- Token-Based Authentication - Handles OAuth-based token exchange to verify user identity and obtain long-lived access tokens from remote providers.
- User Account Management - Manages the binding of user accounts to specific Azure Repos organization URLs and maintains authentication caches.
- Authentication Provider Plugins - Uses a plugin-based architecture to separate authentication logic for different hosting platforms into modular handlers.
- Git Tools - Handles secure Git credential management.
- Notes and Utilities - Secure cross-platform Git credential storage.
