gitlab - Push to a repository using access_token

Question

I implemented the oauth2 web flow in order to get access_token from users of my app. With the access_token, I would like to do the following actions:

Get user informations
Create a repo for this user
Push code to this repo (using git push )

I already successfully get the user information(1) and create a repo(2)

The problem is I can't push code (3), I got "Unauthorized" error.

The command I run:

git remote add origin https://gitlab-ci-token<mytoken>@gitlab.com/myuser/myrepo.git  
git push origin master

Steven C. Howell · Accepted Answer · 2020-09-09 16:21:10Z

142

You should do

git remote add origin https://<access-token-name>:<access-token>@gitlab.com/myuser/myrepo.git

Note that this stores the access token as plain text in the .git\config file. To avoid this you can use the git credential system, providing the access token name for "username" and the access token for "password". This should store the credentials in the git credential system in a more secure way.

edited Sep 9, 2020 at 16:21

Steven C. Howell

19k17 gold badges76 silver badges103 bronze badges

answered Aug 29, 2018 at 9:36

Dave Reikher

2,0241 gold badge18 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

10 Comments

fbstj Over a year ago

this does work, and I found the answer via docs.gitlab.com/ee/user/profile/…

captainblack Over a year ago

Hello What is the difference with the above?

banderlog013 Over a year ago

If gitlab says git remote add origin [email protected]:foo/bar/myrepo.git you should do (watch missed : ) : git remote add origin "https://oauth2:[email protected]/foo/bar/myrepo.git"

George Vinokhodov Over a year ago

And what is <access-token-name>?

jacobytes Over a year ago

@George access-token-name is the name of the token that you generated in gitlab. The < and > in the above example should be excluded, the same goes for access-token value.

|

Akif · Accepted Answer · 2023-10-02 08:58:49Z

55

It is also possible to push directly without adding a new remote repository:

git push https://gitlab-ci-token:<access_token>@gitlab.com/myuser/myrepo.git <branch_name>

This could be particularly useful if you want to pull from and push to different repositories.

edited Oct 2, 2023 at 8:58

answered Aug 23, 2019 at 10:16

Akif

7,0883 gold badges47 silver badges47 bronze badges

3 Comments

Nick K9 Over a year ago

Shouldn't you be hiding your private access token?

elmazzun Over a year ago

@NickK9 you are right, if I push as described and then type "git config -l" I see that the access token content is visible in git config output

mikey Over a year ago

When I try this I get: URL rejected: Port number was not a decimal number between 0 and 65535

vvvvv · Accepted Answer · 2022-09-23 13:35:28Z

18

You can also use git remote set-url. After creating your access token, do:

git remote set-url origin https://gitlab-ci-token:${ACCESS_TOKEN}@gitlab.com/<group>/<repo-name>.git

answered Sep 23, 2022 at 13:35

vvvvv

33k19 gold badges70 silver badges104 bronze badges

Comments

Ben Creasy · Accepted Answer · 2023-01-27 06:20:31Z

3

I placed the following into my ~/.gitconfig:

[credential "https://gitlab.com"]
    username = <insertusername>
    helper = "!f() { echo "username=<insertusername>"; echo "password=$GITLAB_PERSONAL_ACCESS_TOKEN"; };f"

answered Jan 27, 2023 at 6:20

Ben Creasy

4,2854 gold badges45 silver badges52 bronze badges

Comments

Steve Mitchell · Accepted Answer · 2024-03-21 11:01:49Z

The OP asked about using git push, but some Maven plugins also write to the repository. Git credentials can be cached in the git credential system or placed in the settings.xml file.

	git credential	settings.xml
`git push`	X
`maven-release-plugin`		X
`versions-maven-plugin`	X	X

Create a (personal, project, group) access token with write-repository permission and copy it to a masked (project, group) variable REPO_TOKEN.

project/.gitlab-ci.yml:

job:
  script:
    - echo -e 
        "protocol=https\n
         host=gitlab.example.com\n
         username=git\n
         password=$REPO_TOKEN\n"
      | git credential-cache store
    - git commit -m "Upload changes"
    - mvn versions:use-latest-releases
    - mvn release:prepare
    - mvn release:perform

project/pom.xml:

  <scm>
    <url>https://gitlab.example.com/group/${project.artifactId}</url>
    <connection>scm:git:https://gitlab.example.com/group/${project.artifactId}.git</connection>
    <developerConnection>scm:git:https://gitlab.example.com/group/${project.artifactId}.git</developerConnection>
  </scm>
  <properties>
    <scm.tag>${env.COMMIT_ID}</scm.tag>
    <project.scm.id>gitlab-scm</project.scm.id>
  </properties>

~/.m2/settings.xml

  <server>
    <id>gitlab-scm</id>
    <username>git</username>
    <password>${env.REPO_TOKEN}</password>
  </server>

Nicolas Pepinster · Accepted Answer · 2018-08-30 10:56:28Z

-3

Push using gitlab-ci-token is not currently supported by Gitlab. There is an open feature request.

answered Aug 30, 2018 at 10:56

Nicolas Pepinster

6,4352 gold badges39 silver badges54 bronze badges

2 Comments

revelt Over a year ago

You worded it as if it is not possible at all. For the record, git push is possible but by creating personal token and setting origin URL with it hardcoded. This bears security risks as thoroughly discussed in the feature request link you shared in the answer, for which I'd recommend to hide CI from public on GitLab, even on open source repos. For the record that feature request is about doing it "internally" (non-GitLab CI's could equally push using aforementioned tokens) and with granular rights. That's what it was about.

blamb Over a year ago

@nicolas, if you want more points, you can probably delete your answer. ;-)

Collectives™ on Stack Overflow

gitlab - Push to a repository using access_token

6 Answers 6

10 Comments

3 Comments

Comments

Comments

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

10 Comments

3 Comments

Comments

Comments

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related