[JRASERVER-67979] Deprecate support for authenticating using os_username, os_password as url query parameters - Create and track feature requests for Atlassian products.

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Low
Resolution: Fixed
Affects Version/s: 7.12.2
Fix Version/s: 8.0.0
Component/s: Login
Labels:

Introduced in Version:
7.12
Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy
Current Status:

Hide

Atlassian Update – 21 December 2018

Dear Jira users,

We’re glad to announce that this issue will be addressed in our upcoming 8.0 release.

You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588

Looking forward to your feedback!

Kind regards,
Syed Masood
Product Manager, Jira Server and Data Center

Show
Atlassian Update – 21 December 2018 Dear Jira users, We’re glad to announce that this issue will be addressed in our upcoming 8.0 release. You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588 Looking forward to your feedback! Kind regards, Syed Masood Product Manager, Jira Server and Data Center

Description

Problem

Support for using os_username and os_password to authenticate when used as url query parameters has been deprecated in Jira 8.0.0.

It is possible to disable support for os_username & os_password as url query parameters for authentication by setting allowUrlParameterValue to false in <JIRA_install>/atlassian-jira/WEB-INF/web.xml .
example:

    <filter>
        <filter-name>login</filter-name>
        <filter-class>com.atlassian.jira.web.filters.JiraLoginFilter</filter-class>
        <init-param>
            <param-name>allowUrlParameterValue</param-name>
            <param-value>false</param-value>
        </init-param>
    </filter>

Attachments

Issue Links

relates to

JRASERVER-38548 Remove url parameter support for os_username, os_password

Closed

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

(1 mentioned in)

Activity

People

Assignee:: Unassigned

Reporter:: David Black

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Dates

Created:: 21/Sep/2018 10:27 AM

Updated:: 25/Jan/2021 10:07 AM

Resolved:: 11/Feb/2019 12:36 PM