Override the username and password in a git repo url

[jennerm]

Hi,
I have a GitLab repo that has been checked out by a pipeline and the .git file contains the url as:

  url = https://gitlab-ci-token:[email protected]/group/team/shared/my-project.git

With the pipeline credentials in the URL.

I want to use Dulwich to push some tags around in the repo, but the git-ci-token does not have that permission, so I want to override the credentials using:

    porcelain.push(repo=gitlab_project_dir, remote_location="origin", refspecs=[f"refs/tags/{tag}"], username="any-user", password=gitlab_token)

However, it barfs with:

File "/builds/group/team/shared/my-project/.venv/lib/python3.12/site-packages/dulwich/client.py", line 2845, in _http_request
    raise GitProtocolError(f"unexpected http resp {resp.status} for {url}")
dulwich.errors.GitProtocolError: unexpected http resp 403 for [https://gitlab-ci-token:[MASKED]@my.gitlab-dedicated.com/group/team/shared/my-project.git/info/refs?service=git-receive-pack](https://gitlab-ci-token:%5BMASKED%[email protected]/group/team/shared/my-project.git/info/refs?service=git-receive-pack)

And I think it is because the code in client.py uses the url credentials in preference to the ones I pass in:

    def from_parsedurl(cls, parsedurl, **kwargs):
        password = parsedurl.password
        if password is not None:
            kwargs["password"] = urlunquote(password)
        username = parsedurl.username
        if username is not None:
            kwargs["username"] = urlunquote(username)
        return cls(urlunparse(parsedurl), **kwargs)

Is there a way for me to use my credentials to override those in the repo config without hacking the .git/config file?

[jelmer]

Your best bet is probably to just extract the information from the gitconfig file and then manually call porcelain.push with the full URL rather than passing in the origin name.

[jennerm]

Thanks for the advice, that did what I needed. To help others who land here, this is the code I used:

    repo = Repo(gitlab_project_dir)
    repo_config = repo.get_config()
    remote_origin_url = repo_config.get(('remote', 'origin'), 'url').decode()
    remote_location_without_git_ci_token = re.sub(r'https://.*@', 'https://', remote_origin_url)
    gitlab_token = 'abc-def-a-much-better-token'
    porcelain.push(repo=gitlab_project_dir, remote_location=remote_location_without_git_ci_token, refspecs=[f"refs/tags/{tag}"], username="any-user", password=gitlab_token)