1use std::io::Write;
2use std::process::{Command, Stdio};
3
4use url::Url;
5
6pub struct GitCredentialStore;
7
8impl GitCredentialStore {
9    /// Store credentials using git's credential helper system.
10    /// This works with whatever credential helper the user has configured
11    /// (e.g., osxkeychain, manager-core, cache, store).
12    /// See https://git-scm.com/docs/git-credential for more information.
13    pub fn store(url: &str, username: &str, password: &str) -> anyhow::Result<()> {
14        let parsed = Url::parse(url)?;
15        let protocol = parsed.scheme();
16        let host = parsed
17            .host_str()
18            .ok_or_else(|| anyhow::anyhow!("URL missing host"))?;
19        let port = parsed.port();
20
21        let mut credential_input = format!(
22            "protocol={}\nhost={}\nusername={}\npassword={}\n",
23            protocol, host, username, password
24        );
25        if let Some(p) = port {
26            credential_input = format!(
27                "protocol={}\nhost={}:{}\nusername={}\npassword={}\n",
28                protocol, host, p, username, password
29            );
30        }
31
32        let mut child = Command::new("git")
33            .args(["credential", "approve"])
34            .stdin(Stdio::piped())
35            .stdout(Stdio::null())
36            .stderr(Stdio::piped())
37            .spawn()?;
38        if let Some(mut stdin) = child.stdin.take() {
39            stdin.write_all(credential_input.as_bytes())?;
40        }
41        let output = child.wait_with_output()?;
42        if !output.status.success() {
43            let stderr = String::from_utf8_lossy(&output.stderr);
44            anyhow::bail!("git credential approve failed: {}", stderr);
45        }
46
47        Ok(())
48    }
49}
50