Getting started

Access tokens

An access token is a "git-only password". You use it as the password when git on the command line asks for credentials over HTTPS. Tokens can be scoped, given an expiry, and revoked anytime without changing your account password.

Creating a token

  1. Open Access tokens.
  2. Name it after where it's used, e.g. Work laptop.
  3. Choose an expiry (30/90/365 days, or never).
  4. Choose scopes:
    • baca_repo โ€” clone & fetch.
    • tulis_repo โ€” push.
  5. Click Create token, then copy it now โ€” it's shown only once (starts with lbg_).

Using a token

git clone https://jianren.cloud/lumbung/ruang-nama/nama-repo.git
# Username: your nickname (anything, not checked)
# Password: paste the lbg_โ€ฆ token

Stop being asked every time

Store the token in your operating system's credential manager โ€” git remembers it after the first use.

macOS (Keychain):

git config --global credential.helper osxkeychain

Windows โ€” Git Credential Manager ships with Git for Windows:

git config --global credential.helper manager

Linux (stored encrypted in the GNOME/KDE keyring):

git config --global credential.helper libsecret

No keyring (e.g. a server)? git config --global credential.helper store saves the token in plain text in ~/.git-credentials โ€” only use it on trusted machines.

Tokens for servers & CI

For a server that only needs clone/pull, a deploy key is safer (repo Settings โ†’ Deploy keys) โ€” valid for one repo only and tied to no one's account. See Integrations.

Replacing or revoking a token

  • Lost your laptop or leaked a token? Open Access tokens โ†’ Revoke. Git using it is rejected immediately.
  • After creating a new token, remove the old one from your credential manager:
printf "protocol=https\nhost=jianren.cloud\n\n" | git credential reject

This works on macOS, Windows, and Linux โ€” git asks for the new token on the next push. On macOS you can also open Keychain Access, search for the Lumbung host, and delete the entry.

Never put a token inside the remote URL (https://name:token@โ€ฆ) โ€” that URL is stored in plain text in .git/config and shown to anyone who runs git remote -v.