Implement secure OS-backed secret storage
This commit is contained in:
@@ -46,6 +46,8 @@ Git remotes are HTTPS-only. URLs containing user information, passwords,
|
||||
queries, or fragments are rejected. `server_id` and `application_id` are opaque
|
||||
references used to retrieve credentials from the operating-system secret
|
||||
store; duplicate names and duplicate reference pairs are errors.
|
||||
The HTTPS account name is stored inside the protected credential record, not in
|
||||
TOML. OpenPGP passphrases are addressed by the resolved primary fingerprint.
|
||||
|
||||
Passwords, passphrases, tokens, credentials, private keys, and other secret
|
||||
values are forbidden in TOML. Unknown fields are rejected. Parse errors never
|
||||
|
||||
Reference in New Issue
Block a user