Details
-
Bug
-
Resolution: Fixed
-
Low
-
7.12.2
-
7.12
-
Severity 2 - Major
-
-
Description
Problem
Support for using os_username and os_password to authenticate when used as url query parameters has been deprecated in Jira 8.0.0.
It is possible to disable support for os_username & os_password as url query parameters for authentication by setting allowUrlParameterValue to false in <JIRA_install>/atlassian-jira/WEB-INF/web.xml .
example:
<filter>
<filter-name>login</filter-name>
<filter-class>com.atlassian.jira.web.filters.JiraLoginFilter</filter-class>
<init-param>
<param-name>allowUrlParameterValue</param-name>
<param-value>false</param-value>
</init-param>
</filter>
