in lib/gitlab/auth.rb [35:64]
def find_for_git_client(login, password, project:, ip:)
raise "Must provide an IP for rate limiting" if ip.nil?
rate_limiter = Gitlab::Auth::IpRateLimiter.new(ip)
raise IpBlacklisted if !skip_rate_limit?(login: login) && rate_limiter.banned?
result =
service_request_check(login, password, project) ||
build_access_token_check(login, password) ||
lfs_token_check(login, password, project) ||
oauth_access_token_check(login, password) ||
personal_access_token_check(password) ||
deploy_token_check(login, password) ||
user_with_password_for_git(login, password) ||
Gitlab::Auth::Result.new
rate_limit!(rate_limiter, success: result.success?, login: login)
look_to_limit_user(result.actor)
return result if result.success? || authenticate_using_internal_or_ldap_password?
raise Gitlab::Auth::MissingPersonalAccessTokenError
end