Download a private repo with basic auth

Question

I want to download a repo with curl or wget. It must not (!) be git, it must be one of the basic command line tools. It must not be with a consumer token or any token either. Basic auth over SSL connection.

I tried wget, I tried curl, I tried to figure out a rest api call (couldn't puzzle it together). Nothing worked so far.

If this isn't possible: Which git-system allows this? github doesn't (or does it?). That's, why I moved away from github. Does gitlab?

I'm really fed up with this nanny attitude of these systems. There are good reasons to not use basic auth. I push and pull via ssh-key myself. But there are scenarios, where it makes sense to allow basic auth. And I have such.

This is driving me mad and consuming so much time already.

Theodora Boudale · Answer

Hi and welcome to the community!

Account passwords cannot be used for Git operations over HTTPS or API calls, they can only be used for logging in to the website from browser. However, an app password can be used for Basic authentication over HTTPS along with the account's username (both for Git operations and for API calls).

You can find the username of your Bitbucket account here (after you log in):

* https://bitbucket.org/account/settings/

This is the documentation on app passwords:

* https://support.atlassian.com/bitbucket-cloud/docs/app-passwords/

An app password is not a bearer token, it is a type of password, so you can use it with basic auth.

You can find an example in the following knowledge base article on how to download with curl a zip of the repo's source code on a certain branch:

* https://confluence.atlassian.com/bbkb/how-to-download-repositories-using-the-api-1188780893.html

Please note that the zip will contain only the source code, there will be no .git folder with the Git history and commits.

Is this something that works for you?

Kind regards,
Theodora

MaestroGlanz · Answer

So, I found this:
https://developer.atlassian.com/cloud/bitbucket/rest/intro/#authentication

Which says, that only app-password is allowed. Which means, that it isn't possible.

What is this nonsense? If I have to decide, if I will introduce bitbucket in my company, I will decide against it.

I have the situation, that I'm not allowed to publish some material. If I do, I break the law. If someone else breaks into the repo and steals the content, he breaks the law. Basic auth is the right thing to go here. This is the only reason, I need it. Law. Not security, not intellectual property. Law, simply law.