Go to file
Thomas Wolf 4dd9a94ec5 [sshd] Better user feedback on authentication failure
When authentication fails, JGit produces an exception with an error
message telling the user that it could not log in (including the host
name). The causal chain has an SshException from Apache MINA sshd with
message "No more authentication methods available".

This is not very helpful. The user was left without any indication why
authentication failed.

Include in the exception message a log of all attempted authentications.
That way, the user can see which keys were tried, in which order and
with which signature algorithms. The log also reports authentication
attempts for gssapi-with-mic or password authentication. For
keyboard-interactive Apache MINA sshd is lacking a callback interface.

The way Apache MINA sshd loads keys from files, the file names are lost
in higher layers. Add a mechanism to record on the session for each
key fingerprint the file it was loaded from, if any. That way the
exception message can refer to keys by file name, which is easier to
understand by users than the rather cryptic key fingerprints.

Bug: 571390
Change-Id: Ic4b6ce6b99f307d5e798fcc91b16b9ffd995d224
Signed-off-by: Thomas Wolf <thomas.wolf@paranor.ch>
2022-05-01 08:48:44 +02:00
.mvn Configure max heap size for Maven build 2016-12-09 11:02:10 +01:00
.settings Add resource preferences for top level jgit project 2019-12-16 11:20:12 +01:00
Documentation searchForReuse might impact performance in large repositories 2021-06-25 17:57:59 +02:00
lib Bazel: Format build files with buildifier 2022-01-20 00:54:01 -05:00
org.eclipse.jgit RefSpec: add missing @since 2022-04-25 07:45:55 +02:00
org.eclipse.jgit.ant Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.ant.test Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.archive Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.benchmarks Add GetRefsBenchmark for testing refs lookups 2022-04-01 16:39:35 -04:00
org.eclipse.jgit.coverage Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.gpg.bc Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.gpg.bc.test Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.http.apache Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.http.server Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.http.test Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.junit Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.junit.http Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.junit.ssh Merge branch 'stable-6.1' 2022-03-09 21:45:35 +01:00
org.eclipse.jgit.lfs Lazy loading of .lfsconfig. 2022-04-30 15:13:51 +02:00
org.eclipse.jgit.lfs.server Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.lfs.server.test Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.lfs.test DirCacheCheckout: use a LinkedHashMap instead of HashMap 2022-03-19 21:41:55 +01:00
org.eclipse.jgit.packaging Update Tycho to 2.6.0 2022-03-09 22:34:16 +01:00
org.eclipse.jgit.pgm Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.pgm.test [pgm tests] Relax version constraints for hamcrest 2022-03-30 16:26:57 -04:00
org.eclipse.jgit.ssh.apache [sshd] Better user feedback on authentication failure 2022-05-01 08:48:44 +02:00
org.eclipse.jgit.ssh.apache.agent WinPipeConnector: Resolve warnings by using "equals" instead of "==" 2022-03-17 16:03:16 -05:00
org.eclipse.jgit.ssh.apache.test [sshd] Better user feedback on authentication failure 2022-05-01 08:48:44 +02:00
org.eclipse.jgit.ssh.jsch Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
org.eclipse.jgit.ssh.jsch.test Prepare 6.1.1-SNAPSHOT builds 2022-03-08 17:04:10 +01:00
org.eclipse.jgit.test Fetch: Introduce negative refspecs. 2022-04-13 10:21:20 -07:00
org.eclipse.jgit.ui Prepare 6.2.0-SNAPSHOT builds 2022-03-03 10:49:58 +01:00
tools Bazel: Add RBE support 2022-01-20 06:43:13 -04:00
.bazelrc Bazel: Include bazel resource configuration file for RBE build 2022-01-22 20:43:56 +01:00
.bazelversion Bazel: Switch to using toolchain resolution for java rules 2022-01-20 06:40:51 -04:00
.gitattributes Initial JGit contribution to eclipse.org 2009-09-29 16:47:03 -07:00
.gitignore .gitignore: remove editor- and OS-specific files 2019-04-01 13:38:00 -07:00
.mailmap Add myself to .mailmap 2022-01-06 09:05:38 +01:00
BUILD sshd: add support for ssh-agent 2021-11-03 23:46:54 +01:00
CODE_OF_CONDUCT.md Add Eclipse code of conduct and security policy 2021-06-15 13:44:58 +02:00
CONTRIBUTING.md CONTRIBUTING: add explicit link to ECA 2021-06-15 14:01:00 +02:00
DEPENDENCIES Run license check with option -Ddash.projectId=technology.jgit 2022-03-04 07:56:50 +01:00
LICENSE Clean up LICENSE file 2010-07-02 14:52:49 -07:00
README.md Update README 2021-11-07 23:21:39 +01:00
SECURITY.md Add Eclipse code of conduct and security policy 2021-06-15 13:44:58 +02:00
WORKSPACE Bazel: Add RBE support 2022-01-20 06:43:13 -04:00
pom.xml [releng] bump japicmp base version 2022-04-25 07:57:36 +02:00

README.md

Java Git

An implementation of the Git version control system in pure Java.

This project is licensed under the EDL (Eclipse Distribution License).

JGit can be imported straight into Eclipse and built and tested from there. It can be built from the command line using Maven or Bazel. The CI builds use Maven and run on Jenkins.

  • org.eclipse.jgit

    A pure Java library capable of being run standalone, with no additional support libraries. It provides classes to read and write a Git repository and operate on a working directory.

    All portions of JGit are covered by the EDL. Absolutely no GPL, LGPL or EPL contributions are accepted within this package.

  • org.eclipse.jgit.ant

    Ant tasks based on JGit.

  • org.eclipse.jgit.archive

    Support for exporting to various archive formats (zip etc).

  • org.eclipse.jgit.http.apache

    Apache httpclient support.

  • org.eclipse.jgit.http.server

    Server for the smart and dumb Git HTTP protocol.

  • org.eclipse.jgit.lfs

    Support for LFS (Large File Storage).

  • org.eclipse.jgit.lfs.server

    Basic LFS server support.

  • org.eclipse.jgit.packaging

    Production of Eclipse features and p2 repository for JGit. See the JGit Wiki on why and how to use this module.

  • org.eclipse.jgit.pgm

    Command-line interface Git commands implemented using JGit ("pgm" stands for program).

  • org.eclipse.jgit.ssh.apache

    Client support for the SSH protocol based on Apache Mina sshd.

  • org.eclipse.jgit.ssh.apache.agent

    Optional support for SSH agents for org.eclipse.jgit.ssh.apache.

  • org.eclipse.jgit.ui

    Simple UI for displaying git log.

Tests

  • org.eclipse.jgit.junit, org.eclipse.jgit.junit.http, org.eclipse.jgit.junit.ssh: Helpers for unit testing
  • org.eclipse.jgit.ant.test: Unit tests for org.eclipse.jgit.ant
  • org.eclipse.jgit.http.test: Unit tests for org.eclipse.jgit.http.server
  • org.eclipse.jgit.lfs.server.test: Unit tests for org.eclipse.jgit.lfs.server
  • org.eclipse.jgit.lfs.test: Unit tests for org.eclipse.jgit.lfs
  • org.eclipse.jgit.pgm.test: Unit tests for org.eclipse.jgit.pgm
  • org.eclipse.jgit.ssh.apache.test: Unit tests for org.eclipse.jgit.ssh.apache
  • org.eclipse.jgit.test: Unit tests for org.eclipse.jgit

Warnings/Caveats

  • Native symbolic links are supported, provided the file system supports them. For Windows you must use a non-administrator account and have the SeCreateSymbolicLinkPrivilege.

  • Only the timestamp of the index is used by JGit if the index is dirty.

  • JGit 6.0 and newer requires at least Java 11. Older versions require at least Java 1.8.

  • CRLF conversion is performed depending on the core.autocrlf setting, however Git for Windows by default stores that setting during installation in the "system wide" configuration file. If Git is not installed, use the global or repository configuration for the core.autocrlf setting.

  • The system wide configuration file is located relative to where C Git is installed. Make sure Git can be found via the PATH environment variable. When installing Git for Windows check the "Run Git from the Windows Command Prompt" option. There are other options like Eclipse settings that can be used for pointing out where C Git is installed. Modifying PATH is the recommended option if C Git is installed.

  • We try to use the same notation of $HOME as C Git does. On Windows this is often not the same value as the user.home system property.

Features

  • org.eclipse.jgit

    • Read loose and packed commits, trees, blobs, including deltafied objects.

    • Read objects from shared repositories

    • Write loose commits, trees, blobs.

    • Write blobs from local files or Java InputStreams.

    • Read blobs as Java InputStreams.

    • Copy trees to local directory, or local directory to a tree.

    • Lazily loads objects as necessary.

    • Read and write .git/config files.

    • Create a new repository.

    • Read and write refs, including walking through symrefs.

    • Read, update and write the Git index.

    • Checkout in dirty working directory if trivial.

    • Walk the history from a given set of commits looking for commits introducing changes in files under a specified path.

    • Object transport

      Fetch via ssh, git, http, Amazon S3 and bundles. Push via ssh, git, http, and Amazon S3. JGit does not yet deltify the pushed packs so they may be a lot larger than C Git packs.

    • Garbage collection

    • Merge

    • Rebase

    • And much more

  • org.eclipse.jgit.pgm

    • Assorted set of command line utilities. Mostly for ad-hoc testing of jgit log, glog, fetch etc.
  • org.eclipse.jgit.ant

    • Ant tasks
  • org.eclipse.jgit.archive

    • Support for Zip/Tar and other formats
  • org.eclipse.http

    • HTTP client and server support

Missing Features

There are some missing features:

  • signing push
  • shallow and partial cloning
  • support for remote helpers
  • support for credential helpers
  • support for multiple working trees (git-worktree)
  • using external diff tools
  • support for HTTPS client certificates
  • SHA-256 object IDs
  • git protocol V2 (client side): packfile-uris
  • multi-pack index
  • split index

Support

Post questions, comments or discussions to the jgit-dev@eclipse.org mailing list. You need to be subscribed to post. File bugs and enhancement requests in Bugzilla.

Contributing

See the EGit Contributor Guide.

About Git

More information about Git, its repository format, and the canonical C based implementation can be obtained from the Git website.