-
Bug
-
Resolution: Fixed
-
Low
-
7.12.2
-
7.12
-
Severity 2 - Major
-
-
Problem
Support for using os_username and os_password to authenticate when used as url query parameters has been deprecated in Jira 8.0.0.
It is possible to disable support for os_username & os_password as url query parameters for authentication by setting allowUrlParameterValue to false in <JIRA_install>/atlassian-jira/WEB-INF/web.xml .
example:
<filter> <filter-name>login</filter-name> <filter-class>com.atlassian.jira.web.filters.JiraLoginFilter</filter-class> <init-param> <param-name>allowUrlParameterValue</param-name> <param-value>false</param-value> </init-param> </filter>