patx/gitman

(#7) Switch to personal access tokens from http auth

open by patx on 2026-05-08T02:29:44Z

HTTP Basic Auth itself is not inherently "bad", but it has a bunch of weaknesses and operational issues that make it a poor default for Git hosting today compared to SSH keys or personal access tokens. [priority-medium]

Comments

@patx 2026-11-03T04:31:02Z

When we do this I think I will switch the backend to Wred from bottle... This would be a substantial rewrite. I have one mocked up, but not sure it outweighs the current extremely simple setup we have now.

@vextoly 2026-11-03T17:11:06Z

If you do this, please make it switchable ONE of the main reasons i use this platform is because i dont have to use SSH keys or access tokens

@patx 2026-11-03T17:38:52Z

@vextoly Yeah 100% would make it optional, I don't think I'll ever add SSH, don't see any benefits for this platform. The access token would be super easy to choose on your profile settings so you would just use that instead of your site password. But I do plan to keep this optional if we ever even get to it. The whole point of Gitman isn't to be like Github, but a much, much more simple and small version!

@patx 2026-11-03T17:38:53Z

@vextoly Yeah 100% would make it optional, I don't think I'll ever add SSH, don't see any benefits for this platform. The access token would be super easy to choose on your profile settings so you would just use that instead of your site password. But I do plan to keep this optional if we ever even get to it. The whole point of Gitman isn't to be like Github, but a much, much more simple and small version!

@vextoly 2026-11-03T17:40:48Z

Awsome! My plan was literally to build a website that is exactly like this one/incredibly similar because i was frustrated with github and forjego and stagit had not enough features. I really like your platform, keep it up!

@patx 2026-11-03T18:14:30Z

@vextoly I am thinking about changing the UI/UX to be a little more modern, I originally designed it as like a old school hacker vibe kinda thing lol, if you have any front end design thoughts your willing to share, it would be much appreciated!

@vextoly 2026-11-03T18:15:39Z

@patx I love to design my things like this: https://vextoly.lgbt.sh/ i like modern minimalism

@vextoly 2026-11-03T18:19:41Z

I think i may make a fork and apply my design language to see how it looks

Log in to comment