Azure Devops OnPremise，致命：克隆 Git 存储库时身份验证失败

Question

Using OnPremise Azure Devops 2019 server I am trying to programmatically clone a git repository by calling the following git command inside a ProcessInfo:

clone https://{username}:{PATTOKEN}@{DEVOPSSERVERDOMAIN}/{TEAMPROJECT}/_git/{PROJECT}

Here is the c# code:

  var gitInfo = new ProcessStartInfo
                    {
                        CreateNoWindow = true,
                        RedirectStandardError = true,
                        RedirectStandardOutput = true,
                        FileName = pathToGitExe
                    };

Process gitProcess = new Process();
                gitInfo.Arguments = theCloneCommand
                gitInfo.WorkingDirectory = workingFolder;
                gitProcess.StartInfo = gitInfo;
                gitProcess.Start();

But I keep getting the error

Cloning into 'PROJECT'...
fatal: Authentication failed for '{DEVOPSSERVERDOMAIN}/{TEAMPROJECT}/_git/{PROJECT}'

Is the PAT not correctly used? Any suggestions

Answer 1

As far as I can see, you should try the clone without username .

https://github.com/MicrosoftDocs/azure-devops-docs/issues/2455

https://<PAT>@mydomain.visualstudio.com/myproject/_git/myrepo

Answer 2

If you enable IIS Basic Authentication for Azure Devops server, PATs aren't valid. See Enabling IIS Basic Authentication invalidates using Personal Access Tokens .

As it is said in above document, you need to add an extra header which includes a base 64 encoding of "user:PAT" to the Git requests:

git -c http.extraheader='Authorization: Basic [base 64 encoding of "user:PAT"]' ls-remote http://tfsserver:8080/tfs/DefaultCollection/_git/projectName

You can Base64-encode the username and PAT using below poweshell script:

$MyPat = 'yourPAT'
$B64Pat = [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("user:$MyPat"))

Or with C# code:

Convert.ToBase64String(
                    System.Text.ASCIIEncoding.ASCII.GetBytes(
                        string.Format("{0}:{1}", "user", personalaccesstoken))));

For more information, See document here .

You can try using your userName and password instead of PAT as authentication:

git clone https://{username}:{password}@{DEVOPSSERVERDOMAIN}/{TEAMPROJECT}/_git/{PROJECT}
#if your password or username contain @ replace it with %40