Authentication fails periodically when using git-credential-osxkeychain

[abh]

[Periodically] when authenticating to Gitea I have to run the git command twice -- first it fails, the second time my browser opens and I get a new token.

Is that expected or is my configuration making it happen?

% git push gitea
remote: Verify
fatal: Authentication failed for 'https://gitea.example.com/org/project.git/'

This is my configuration:

[credential]
        helper = osxkeychain  # merged from /usr/local/...
	helper = cache --timeout 7100
	helper = oauth

[credential "https://gitea.example.com"]
        helper = oauth
	# https://docs.gitea.com/development/oauth2-provider
	oauthClientId = a4792ccc-144e-407e-86c9-5e7d8d9c3269
	oauthScopes = read_repository
	oauthAuthURL = /login/oauth/authorize
	oauthTokenURL = /login/oauth/access_token

[hickford]

This happens because git-credential-osxkeychain doesn't store attributes password_expiry_utc and oauth_refresh_token . These are necessary for OAuth token refresh.

If you have the expertise, please take a look:

Help wanted from a Mac OS C developer to add password_expiry_utc and oauth_refresh_token support to git-credential-osxkeychain. This could follow the design of git-credential-libsecret.

[hickford]

A fix to credential-osxkeychain is in review gitgitgadget/git#1667 https://lore.kernel.org/git/pull.1667.git.1708212896.gitgitgadget@gmail.com/

[hickford]

Fixed in Git 2.45 https://github.com/git/git/commits/v2.45.0/contrib/credential/osxkeychain