Uploaded image for project: 'Jira Software Data Center'
  1. Jira Software Data Center
  2. JSWSERVER-20414

Jira's DVCS GitHub connector uses the "access_token" query parameter which is a deprecated authentication method for the GitHub API

    XMLWordPrintable

Details

    Description

      Issue Summary

      Jira's DVCS GitHub connector uses the "access_token" query parameter which is now a deprecated authentication method for the GitHub API

      Steps to Reproduce

      1. Go to Jira Administration > Application > DVCS Accounts
      2. Click on "Link Bitbucket Cloud and GitHub accounts" button
      3. Provide details for GitHub (check screen shot) and proceed.
      4. Make sure that Jira syncs this GitHub data at least once

      Expected Results

      The integration works without any problems.

      Actual Results

      GitHub is currently emailing administrators to inform them that they have an integration that is using this deprecated authentication method. The message looks like this:

      Hi,

      On February 4th, 2020 at 14:01 (UTC) your application (JIRA DVCS) used an access token (with the User-Agent Java/1.8.0_151) as part of a query parameter to access an endpoint through the GitHub API:

      https://api.github.com/repositories/229755391/hooks

      Please use the Authorization HTTP header instead as using the `access_token` query parameter is deprecated.

      Depending on your API usage, we'll be sending you this email reminder once every 3 days for each token and User-Agent used in API calls made on your behalf.
      Just one URL that was accessed with a token and User-Agent combination will be listed in the email reminder, not all.

      Visit https://developer.github.com/changes/2019-11-05-deprecated-passwords-and-authorizations-api/#authenticating-using-query-parameters for more information.

      Thanks,
      The GitHub Team

      Notes

      Workaround

      None

      Attachments

        Issue Links

          Activity

            People

              aermolenko Tony Miller
              vpandey2@atlassian.com Vikas Pandey (Inactive)
              Votes:
              130 Vote for this issue
              Watchers:
              167 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: