Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-67979

Deprecate support for authenticating using os_username, os_password as url query parameters

XMLWordPrintable

    • 7.12
    • Severity 2 - Major
    • Hide
      Atlassian Update – 21 December 2018

      Dear Jira users,

      We’re glad to announce that this issue will be addressed in our upcoming 8.0 release.

      You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588

      Looking forward to your feedback!

      Kind regards,
      Syed Masood
      Product Manager, Jira Server and Data Center

      Show
      Atlassian Update – 21 December 2018 Dear Jira users, We’re glad to announce that this issue will be addressed in our upcoming 8.0 release. You can find more details about our 8.0 beta release here — https://community.developer.atlassian.com/t/beta-for-jira-8-0-is-up-for-grabs/25588 Looking forward to your feedback! Kind regards, Syed Masood Product Manager, Jira Server and Data Center

      Problem

      Support for using os_username and os_password to authenticate when used as url query parameters has been deprecated in Jira 8.0.0.

      It is possible to disable support for os_username & os_password as url query parameters for authentication by setting allowUrlParameterValue to false in <JIRA_install>/atlassian-jira/WEB-INF/web.xml .
      example: 

          <filter>
        <filter-name>login</filter-name>
        <filter-class>com.atlassian.jira.web.filters.JiraLoginFilter</filter-class>
        <init-param>
            <param-name>allowUrlParameterValue</param-name>
            <param-value>false</param-value>
        </init-param>
    </filter>

            [JRASERVER-67979] Deprecate support for authenticating using os_username, os_password as url query parameters

            Patrick Turbett made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 840380 ]
            Tiziana Marchionni made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 788100 ]
            Mateusz Marzęcki made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 726307 ]
            Tomasz Bartyzel made changes -
            Remote Link Original: This issue links to "Page (Atlassian Documentation)" [ 527233 ]
            Tomasz Bartyzel made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 527233 ]
            Tomasz Bartyzel made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 516451 ]
            Tomasz Bartyzel made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 515961 ]
            Tomasz Bartyzel made changes -
            Remote Link New: This issue links to "Page (Atlassian Documentation)" [ 515960 ]
            Ignat (Inactive) made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 468765 ]
            Said made changes -
            Labels Original: advisory-released exclude-from-security-metrics-page improper-authentication improper-authorization security triaged New: advisory-released basm exclude-from-security-metrics-page improper-authentication improper-authorization security triaged

              Unassigned Unassigned
              dblack David Black
              Affected customers:
              0 This affects my team
              Watchers:
              8 Start watching this issue

                Created:
                Updated:
                Resolved: