API Token Authentication for Bitbucket

Compatibility release for Bitbucket 10

Compatibility release for Bitbucket 10

• Updated 3rd-party libraries

• Updated 3rd-party libraries

• 3rd-party and internal library updates

• 3rd-party and internal library updates

Added values of 1 to 4 minutes to the "Maximum/ Rate Limit Bucket Lifetime" option.

Added values of 1 to 4 minutes to the "Maximum/ Rate Limit Bucket Lifetime" option.

• Updated internal frontend library
• Better handling of unsupported SystemV timezone of users using the UI of our app
  • Users are now prompted to change their timezone, and the UI no longer crashes
• During testing against Bitbucket 9.3.0, we noticed that one can no longer authenticate the REST APIs with a session cookie only and without providing a valid Basic or Bearer Authentication header in the request.
  • Please make sure you adjust any scripts or similar accordingly.
  • This seems to have been introduced between Bitbucket 9.0.0 and 9.3.0.

• Updated internal frontend library
• Better handling of unsupported SystemV timezone of users using the UI of our app
  • Users are now prompted to change their timezone, and the UI no longer crashes
• During testing against Bitbucket 9.3.0, we noticed that one can no longer authenticate the REST APIs with a session cookie only and without providing a valid Basic or Bearer Authentication header in the request.
  • Please make sure you adjust any scripts or similar accordingly.
  • This seems to have been introduced between Bitbucket 9.0.0 and 9.3.0.

With this update, API Token Authentication is compatible with Bitbucket 9.

With this update, API Token Authentication is compatible with Bitbucket 9.

A new option in the System-Wide settings allows admins to control how often the 'Last Used' value of a token is being updated. Read here for more details.

A new option in the System-Wide settings allows admins to control how often the 'Last Used' value of a token is being updated. Read here for more details.

• To be prepared for upcoming changes in the Atlassian audit-logging service we refactored the app's code accordingly
• • Please remember that we only audit-log app configuration changes, all other events can be logged with the built-in Bitbucket tools
• Fixed a bug causing broken links to the Atlassian application (i.e. the audit log) in our UI whenever the instance was using an application context path

• To be prepared for upcoming changes in the Atlassian audit-logging service we refactored the app's code accordingly
• • Please remember that we only audit-log app configuration changes, all other events can be logged with the built-in Bitbucket tools
• Fixed a bug causing broken links to the Atlassian application (i.e. the audit log) in our UI whenever the instance was using an application context path

• Optimised app-configuration processing for performance

• Optimised app-configuration processing for performance

Fixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.

Fixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.

Please refer to the release notes for more details.

Please refer to the release notes for more details.

Updated OkHttp and Okio libraries

Updated OkHttp and Okio libraries

Added configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.

Added configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.

Added log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.

Added log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.

Fixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.

Fixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.