API Token Authentication for Confluence expand user security

Compatibility release for Confluence 10

Compatibility release for Confluence 10

• Updated 3rd-party libraries

• Updated 3rd-party libraries

• Fixed an issue with requests to an endpoint starting with /rest/api/admin/, which was throwing a 401 error with the message “WebSudo required”
  • You need to authenticate the request with a system administrator user to succeed

• Fixed an issue with requests to an endpoint starting with /rest/api/admin/, which was throwing a 401 error with the message “WebSudo required”
  • You need to authenticate the request with a system administrator user to succeed

• 3rd-party and internal library updates

• 3rd-party and internal library updates

Added values of 1 to 4 minutes to the "Maximum/ Rate Limit Bucket Lifetime" option.

Added values of 1 to 4 minutes to the "Maximum/ Rate Limit Bucket Lifetime" option.

Fixed a problem with the ConfluenceClusterNotificator that caused configuration changes not to be propagated in Confluence 9 when running a cluster with more than one node.

Fixed a problem with the ConfluenceClusterNotificator that caused configuration changes not to be propagated in Confluence 9 when running a cluster with more than one node.

A new option in the System-Wide settings allows admins to control how often the 'Last Used' value of a token is being updated. Read here for more details.

A new option in the System-Wide settings allows admins to control how often the 'Last Used' value of a token is being updated. Read here for more details.

• To be prepared for upcoming changes in the Atlassian audit-logging service we refactored the app's code accordingly and improved how details of events are being tracked
• • you can compare the differences in our documentation: new version and old version
• Fixed a bug causing broken links to the Atlassian application (i.e. the audit log) in our UI whenever the instance was using an application context path

• Fixed a bug introduced with version 2.5.0 that caused HTTP status code 403 responses when using API Tokens with Basic Authentication whenever "Disable Basic Authentication with User Password" was enabled in "System-Wide Settings"
• 3rd-Party Library Updates

• To be prepared for upcoming changes in the Atlassian audit-logging service we refactored the app's code accordingly and improved how details of events are being tracked
  • you can compare the differences in our documentation: new version and old version
• Fixed a bug causing broken links to the Atlassian application (i.e. the audit log) in our UI whenever the instance was using an application context path

• Fixed a bug introduced with version 2.5.0 that caused HTTP status code 403 responses when using API Tokens with Basic Authentication whenever "Disable Basic Authentication with User Password" was enabled in "System-Wide Settings"
• 3rd-Party Library Updates

Released a modification for a dark feature used by a single customer only

• you can skip this update if you don’t know what it is about

Released a modification for a dark feature used by a single customer only

• You can skip this update if you don’t know what it is about

• Added an option to allow Basic Authentication on all endpoints/ paths; read more about it here
• Optimised app configuration processing for performance

• Added an option to allow Basic Authentication on all endpoints/ paths; read more about it here
• Optimised app configuration processing for performance

Fixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.

Fixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.

Please refer to the release notes for more details.

Please refer to the release notes for more details.

Updated OkHttp and Okio libraries

Updated OkHttp and Okio libraries

Added configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.

Added configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.

This is a maintenance release to improve the app.

This is a maintenance release to improve the app.

Added log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.

Added log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.

Fixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.

Fixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.