2 * A git credential helper that interface with Windows' Credential Manager
12 #define ARRAY_SIZE(x) (sizeof(x)/sizeof(x[0]))
14 static void die(const char *err
, ...)
18 va_start(params
, err
);
19 vsnprintf(msg
, sizeof(msg
), err
, params
);
20 fprintf(stderr
, "%s\n", msg
);
25 static void *xmalloc(size_t size
)
27 void *ret
= malloc(size
);
35 /* MinGW doesn't have wincred.h, so we need to define stuff */
37 typedef struct _CREDENTIAL_ATTRIBUTEW
{
42 } CREDENTIAL_ATTRIBUTEW
, *PCREDENTIAL_ATTRIBUTEW
;
44 typedef struct _CREDENTIALW
{
50 DWORD CredentialBlobSize
;
51 LPBYTE CredentialBlob
;
54 PCREDENTIAL_ATTRIBUTEW Attributes
;
57 } CREDENTIALW
, *PCREDENTIALW
;
59 #define CRED_TYPE_GENERIC 1
60 #define CRED_PERSIST_LOCAL_MACHINE 2
61 #define CRED_MAX_ATTRIBUTES 64
63 typedef BOOL (WINAPI
*CredWriteWT
)(PCREDENTIALW
, DWORD
);
64 typedef BOOL (WINAPI
*CredEnumerateWT
)(LPCWSTR
, DWORD
, DWORD
*,
66 typedef VOID (WINAPI
*CredFreeT
)(PVOID
);
67 typedef BOOL (WINAPI
*CredDeleteWT
)(LPCWSTR
, DWORD
, DWORD
);
69 static HMODULE advapi
;
70 static CredWriteWT CredWriteW
;
71 static CredEnumerateWT CredEnumerateW
;
72 static CredFreeT CredFree
;
73 static CredDeleteWT CredDeleteW
;
75 static void load_cred_funcs(void)
78 advapi
= LoadLibraryExA("advapi32.dll", NULL
,
79 LOAD_LIBRARY_SEARCH_SYSTEM32
);
81 die("failed to load advapi32.dll");
83 /* get function pointers */
84 CredWriteW
= (CredWriteWT
)GetProcAddress(advapi
, "CredWriteW");
85 CredEnumerateW
= (CredEnumerateWT
)GetProcAddress(advapi
,
87 CredFree
= (CredFreeT
)GetProcAddress(advapi
, "CredFree");
88 CredDeleteW
= (CredDeleteWT
)GetProcAddress(advapi
, "CredDeleteW");
89 if (!CredWriteW
|| !CredEnumerateW
|| !CredFree
|| !CredDeleteW
)
90 die("failed to load functions");
93 static WCHAR
*wusername
, *password
, *protocol
, *host
, *path
, target
[1024];
95 static void write_item(const char *what
, LPCWSTR wbuf
, int wlen
)
100 printf("%s=\n", what
);
104 int len
= WideCharToMultiByte(CP_UTF8
, 0, wbuf
, wlen
, NULL
, 0, NULL
,
108 if (!WideCharToMultiByte(CP_UTF8
, 0, wbuf
, wlen
, buf
, len
, NULL
, FALSE
))
109 die("WideCharToMultiByte failed!");
112 fwrite(buf
, 1, len
, stdout
);
118 * Match an (optional) expected string and a delimiter in the target string,
119 * consuming the matched text by updating the target pointer.
122 static LPCWSTR
wcsstr_last(LPCWSTR str
, LPCWSTR find
)
124 LPCWSTR res
= NULL
, pos
;
125 for (pos
= wcsstr(str
, find
); pos
; pos
= wcsstr(pos
+ 1, find
))
130 static int match_part_with_last(LPCWSTR
*ptarget
, LPCWSTR want
, LPCWSTR delim
, int last
)
132 LPCWSTR delim_pos
, start
= *ptarget
;
135 /* find start of delimiter (or end-of-string if delim is empty) */
137 delim_pos
= last
? wcsstr_last(start
, delim
) : wcsstr(start
, delim
);
139 delim_pos
= start
+ wcslen(start
);
142 * match text up to delimiter, or end of string (e.g. the '/' after
143 * host is optional if not followed by a path)
146 len
= delim_pos
- start
;
150 /* update ptarget if we either found a delimiter or need a match */
151 if (delim_pos
|| want
)
152 *ptarget
= delim_pos
? delim_pos
+ wcslen(delim
) : start
+ len
;
154 return !want
|| (!wcsncmp(want
, start
, len
) && !want
[len
]);
157 static int match_part(LPCWSTR
*ptarget
, LPCWSTR want
, LPCWSTR delim
)
159 return match_part_with_last(ptarget
, want
, delim
, 0);
162 static int match_part_last(LPCWSTR
*ptarget
, LPCWSTR want
, LPCWSTR delim
)
164 return match_part_with_last(ptarget
, want
, delim
, 1);
167 static int match_cred(const CREDENTIALW
*cred
)
169 LPCWSTR target
= cred
->TargetName
;
170 if (wusername
&& wcscmp(wusername
, cred
->UserName
? cred
->UserName
: L
""))
173 return match_part(&target
, L
"git", L
":") &&
174 match_part(&target
, protocol
, L
"://") &&
175 match_part_last(&target
, wusername
, L
"@") &&
176 match_part(&target
, host
, L
"/") &&
177 match_part(&target
, path
, L
"");
180 static void get_credential(void)
186 if (!CredEnumerateW(L
"git:*", 0, &num_creds
, &creds
))
189 /* search for the first credential that matches username */
190 for (i
= 0; i
< num_creds
; ++i
)
191 if (match_cred(creds
[i
])) {
192 write_item("username", creds
[i
]->UserName
,
193 creds
[i
]->UserName
? wcslen(creds
[i
]->UserName
) : 0);
194 write_item("password",
195 (LPCWSTR
)creds
[i
]->CredentialBlob
,
196 creds
[i
]->CredentialBlobSize
/ sizeof(WCHAR
));
203 static void store_credential(void)
207 if (!wusername
|| !password
)
211 cred
.Type
= CRED_TYPE_GENERIC
;
212 cred
.TargetName
= target
;
213 cred
.Comment
= L
"saved by git-credential-wincred";
214 cred
.CredentialBlobSize
= (wcslen(password
)) * sizeof(WCHAR
);
215 cred
.CredentialBlob
= (LPVOID
)password
;
216 cred
.Persist
= CRED_PERSIST_LOCAL_MACHINE
;
217 cred
.AttributeCount
= 0;
218 cred
.Attributes
= NULL
;
219 cred
.TargetAlias
= NULL
;
220 cred
.UserName
= wusername
;
222 if (!CredWriteW(&cred
, 0))
223 die("CredWrite failed");
226 static void erase_credential(void)
232 if (!CredEnumerateW(L
"git:*", 0, &num_creds
, &creds
))
235 for (i
= 0; i
< num_creds
; ++i
) {
236 if (match_cred(creds
[i
]))
237 CredDeleteW(creds
[i
]->TargetName
, creds
[i
]->Type
, 0);
243 static WCHAR
*utf8_to_utf16_dup(const char *str
)
245 int wlen
= MultiByteToWideChar(CP_UTF8
, 0, str
, -1, NULL
, 0);
246 WCHAR
*wstr
= xmalloc(sizeof(WCHAR
) * wlen
);
247 MultiByteToWideChar(CP_UTF8
, 0, str
, -1, wstr
, wlen
);
251 static void read_credential(void)
255 while (fgets(buf
, sizeof(buf
), stdin
)) {
257 int len
= strlen(buf
);
258 /* strip trailing CR / LF */
259 while (len
&& strchr("\r\n", buf
[len
- 1]))
265 v
= strchr(buf
, '=');
267 die("bad input: %s", buf
);
270 if (!strcmp(buf
, "protocol"))
271 protocol
= utf8_to_utf16_dup(v
);
272 else if (!strcmp(buf
, "host"))
273 host
= utf8_to_utf16_dup(v
);
274 else if (!strcmp(buf
, "path"))
275 path
= utf8_to_utf16_dup(v
);
276 else if (!strcmp(buf
, "username")) {
277 wusername
= utf8_to_utf16_dup(v
);
278 } else if (!strcmp(buf
, "password"))
279 password
= utf8_to_utf16_dup(v
);
281 die("unrecognized input");
285 int main(int argc
, char *argv
[])
288 "usage: git credential-wincred <get|store|erase>\n";
293 /* git use binary pipes to avoid CRLF-issues */
294 _setmode(_fileno(stdin
), _O_BINARY
);
295 _setmode(_fileno(stdout
), _O_BINARY
);
301 if (!protocol
|| !(host
|| path
))
304 /* prepare 'target', the unique key for the credential */
305 wcscpy(target
, L
"git:");
306 wcsncat(target
, protocol
, ARRAY_SIZE(target
));
307 wcsncat(target
, L
"://", ARRAY_SIZE(target
));
309 wcsncat(target
, wusername
, ARRAY_SIZE(target
));
310 wcsncat(target
, L
"@", ARRAY_SIZE(target
));
313 wcsncat(target
, host
, ARRAY_SIZE(target
));
315 wcsncat(target
, L
"/", ARRAY_SIZE(target
));
316 wcsncat(target
, path
, ARRAY_SIZE(target
));
319 if (!strcmp(argv
[1], "get"))
321 else if (!strcmp(argv
[1], "store"))
323 else if (!strcmp(argv
[1], "erase"))
325 /* otherwise, ignore unknown action */