世界最大同性交友网站七夕大礼包————remote ：Support for password authentication was removed on August 13,

最新推荐文章于 2022-08-10 13:21:54 发布

qq_39423172

最新推荐文章于 2022-08-10 13:21:54 发布

阅读量1.3k

点赞数 1

文章标签： git github

本文链接：https://blog.csdn.net/qq_39423172/article/details/119853343

版权

GitHub 个人访问令牌账户安全 token替换权限管理

关键词由CSDN通过智能技术生成

世界最大同性交友网站七夕大礼包————remote ：Support for password authentication was removed on August 13,

原创文章，转载注明出处！原载于我的博客（点击前往）

1.问题背景-background

七夕晚上，作为single dog的你下班以后发现自己居然无地可去，想了想，哎，还是回去加班吧，公司真是个逃避现实的好地方。码完代码才发现已经11点了，准备提交完代码就回家睡觉。打开git，输完账号密码，突然弹出这么一句话：remote: Support for password authentication was removed on August 13, 2021. Please use a personal access token instead.
大概意思就是你原先的密码凭证从2021年8月13日开始就不能用了，必须使用一个叫personal access token的玩意！

滚！我tm懒得弄！

Github 官方解释，不想看可以略过

We described our motivation as we announced similar changes to authenticating with the API as follows:

In recent years, GitHub customers have benefited from a number of security enhancements to GitHub.com, such as two-factor authentication, sign-in alerts, verified devices, preventing the use of compromised passwords, and WebAuthn support. These features make it more difficult for an attacker to take a password that’s been reused across multiple websites and use it to try to gain access to your GitHub account. Despite these improvements, for historical reasons customers without two-factor authentication enabled have been able to continue to authenticate Git and API operations using only their GitHub username and password.

Beginning August 13, 2021, we will no longer accept account passwords when authenticating Git operations and will require the use of token-based authentication, such as a personal access token (for developers) or an OAuth or GitHub App installation token (for integrators) for all authenticated Git operations on GitHub.com. You may also continue using SSH keys where you prefer.

Tokens offer a number of security benefits over password-based authentication:

1.Unique – tokens are specific to GitHub and can be generated per use or per device

2.Revocable – tokens can can be individually revoked at any time without needing to update unaffected credentials

3.Limited – tokens can be narrowly scoped to allow only the access necessary for the use case

4.Random – tokens are not subject to the types of dictionary or brute force attempts that simpler passwords that you need to remember or enter regularly might be

大概意思就是：为了保证各位程序员的账户安全，我们已于2021年7月14日禁止大家在git及第三方应用上通过密码授权GitHub。以后将使用token令牌代替密码。
（话说能活跃在全球最大同性交友网站的程序猿能有什么秘密值得如此加密。。。）

2.什么是token令牌？

token令牌相当于在第三方接口代替你密码的一个玩意，有点像强密码。但是，token令牌并不是只能有唯一一个的。你可以拥有多个令牌，给不同的第三方接口不同的令牌，而每个令牌都被赋予了不同的权限和使用期限。也就是说，在令牌没赋予的权利将不会给第三方接口和git。当然，token令牌在你设定的期限之后，对应的第三方接口和git就需要你重新给一个令牌，否则也无法使用。令牌也可以随时更改权限和删除。