通过composer从私有Bitbucket存储库导入包

Question

I have a package setup in a private Bitbucket repository that I use across a variety of Laravel based client projects. I find I am regularly adding to it and would like to be able to update each client's project using composer as needed with the latest edition.

How do I add an entry into composer to pull from the Bitbucket git repository without having to expose my personal repository login/password to the clients in the composer.json file?

Answer 1

Use ssh authentication and configure some Deployment Keys :

• Go into "Project Settings -> Deployment Keys"
• Then add a different deployment key for each of your clients.

You can find more info on the links on how to set-up ssh authentication with Mercurial or Git.

Answer 2

I have some problem with bitbucket private repos... So I've added something like this in my project root's composer.json.

"require"     : {
            "php"                                      : ">=5.4.0",
            ...,
            "author/my-package"                     : "0.2"
},

"repositories": [
            {
                "type"   : "package",
                "package": {
                    "name"   : "author/my-package",
                    "version": "0.2",
                    "source" : {
                        "url"      : "ssh://hg@bitbucket.org/author/my-package",
                        "type"     : "hg",
                        "reference": "0.2"
                    },
                    "require": {
                        "php": ">=5.4.0",
                        "zendframework/zendframework": "2.3.*"
                    },
                    "autoload": {
                        "psr-0": {
                            "PackageNameSpace": "src/"
                        },
                        "classmap": [
                            "./Module.php"
                        ]
                    }
                }
            },
    ...
    ]

So after composer.phar update it creates repo dir in vendor... But after new commit in private repo and composer.phar update it doesn't pull last changeset... It stays on head that was on first repo import