AuthenticationImprove this page
Online projects may require authentication to create branches or commits on the remote or even fetch the content in case of private repositories. Since abapGit uses git over HTTP the authentication mechanism is Basic Authentication (RFC 2617) using a combination of username and password or username and token (GitHub requires using personal tokens since 8/2021). If the remote requires authentication for an action a popup will appear to enable the user to provide the necessary data. Once authentication is successful the session remains intact until abapGit is restarted.
Note: Apparently, SAP ABAP supports only RFC 2617 for Basic Authentication and not RFC 7617. Therefore, you have to use ASCII characters only for your repository passwords (including extended ASCII, hex 20 to FF, https://en.wikipedia.org/wiki/ISO/IEC_8859-1). The Euro symbol, for example, is not included since it’s Unicode U+20AC (which would require RFC 7617 and UTF-8 encoding of passwords). SAP has documented this limitation in SAP Notes 1240796.
Two factor authentication
Most git hosts allow for two factor authentication. Relevant for abapGit is how to authenticate with 2FA enabled on the command line when using git over HTTP. This is usually done using a token which can be used instead of the normal password. Check the documentation of your git host on how to do this in detail (GitHub, GitLab, Bitbucket, Azure DevOps). Note that the username might be different from your normal one when using the token as the password.
Using a password manager
To store passwords or tokens you might want to use a password manager. To enable autofill you can match the window title of the entry to the following pattern:
NPL(*)/001 Login: github.com
Note the part
NPL(*)/001 only appears if you have
Show system name in taskbar button enabled in the SAP GUI options.
Using a custom authentication mechanism
You can use the exit
CREATE_HTTP_CLIENT to implement a different authentication yourself by returning an already authenticated http client instance. See the exit documentation for examples.
abapGit intentionally does not provide a way to store login data across sessions. This is because SAP systems are multi-user-systems and since abapGit is mostly used by developers on shared development systems who have extensive authorizations any approach to store passwords runs the risk of getting abused. On local single user systems you can easily implement the exit mentioned above to permanently store the login data in a RFC destination. Otherwise a password manager is the recommended approach to store login data. (See discussion in #3798)