Can install_bitbucket use the ssh public key for authentication when install from a private bitbucket repository?

[imadcat]

It seems to be a much safer practice to rely on public key than to pass the username and password parameters in clear text.

[hadley]

I'd be happy to review a pull request that implemented this, but since I don't use bitbucket, I can't write it myself.

[Serenthia]

I'm not really wanting to commit my plaintext Bitbucket password for all my company to see, but I'm not sure of any way round this without this feature? I'd like to second @imadcat's request, should anyone feel up to the task of making that PR.

Many thanks

[kleinschmidt]

I was hoping to do the same thing. Once I looked at the code, however, I realized that install_bitbucket uses the REST API to download a .zip of the repo. The API can only be accessed through HTTPS (as far as I can tell).

The way around it is to use install_git('[email protected]/<username>/<repo>/') instead of install_bitbucket('username/repo'), but that requires a bit more boilerplate. @hadley, would you be open to falling back on install_git for something like install_bitbucket('<username>/<repo>', use_ssh=TRUE)? If so I'll open a PR.

[imanuelcostigan]

See #1220

[paulrougieux]

See also bitbucket app passwords

in the Access Management section of your account settings

As seen on App passwords are here in Bitbucket Cloud.

The issue with an app password is that it gives access to all repositories on you account. The PAT gives access to one repository only.

[lock]

This old issue has been automatically locked. If you believe you have found a related problem, please file a new issue (with reprex) and link to this issue. https://reprex.tidyverse.org/