From: Alan Gutierrez <alan@...>
Date: 2009-03-30T10:14:59+09:00
Subject: Re: Exposing an API over HTTPS

On Mar 29, 6:39 pm, Felipe Coury <felipe.co...@gmail.com> wrote:

> One way of authentication that I always liked is the way, for instance,
> GitHub handles pushes to their servers. When you give them your public
> SSH RSA key, makes this machine authorized to interact as you with their
> server.

GitHub uses gitosis, which is a Python application built on top of
SSH. There is a "git" user and the git commands are run as that user,
so the shortest path, to mimic gitosis, would involve building on top
of SSH not HTTPS.

You should read the gitosis code.

http://eagain.net/gitweb/?p=gitosis.git;a=summary

Alan Gutierrez - alan@blogometer.com - http://blogometer.com