Code Issues Merge Requests Branches Tags Releases Compare Graph

fix: return WWW-Authenticate header on push 401 git doesn't send credentials proactively to new servers. It requires a 401 response with WWW-Authenticate: Basic to trigger the credential helper. Without this header, git sees 401 and gives up immediately with "Authentication required" instead of retrying with credentials.

Author: Aaron Steven White Apr 12, 2026, 10:03 PM

Commit 6ce78f3ef56bfb10f263c41665b4d5bd0a3cf838

Structural diff unavailable

These commits were pushed via plain git push, so no pre-parsed schemas are available. Install git-remote-cospan and re-push via panproto:// to see scope-level changes, breaking change detection, and semantic diffs.

brew install panproto/tap/git-remote-cospan

1 file changed +1 -1

@@ -94,7 +94,7 @@ pub async fn git_info_refs(

9494             crate::auth::push_auth::PushAuth::NoCredentials => {
9595                 return (
9696                     StatusCode::UNAUTHORIZED,
97-                    [(header::CONTENT_TYPE, "text/plain".to_owned())],
97+                    [(header::WWW_AUTHENTICATE, "Basic realm=\"cospan-node\"".to_owned())],
9898                     b"Authentication required for push".to_vec(),
9999                 );
100100             }

Back to repository