Re:Git password authentication is shutting down
by nonameiguess on Thursday August 12, 2021 @07:31PM
(#28163109)
Access tokens can practice least privilege and be scoped to a limited set of actions on a single repo. Your user password has whatever privileges your user has on every repo you've been given access to.
[ Parent
| on HN ]
Re:Git password authentication is shutting down
by notatoad on Thursday August 12, 2021 @11:05PM
(#28164932)
Not just whatever repo permissions your user has, critically your password has permissions to access your user account, which can do things like granting permissions to others, or changing your own security credentials.