public_git/oauth2-proxy
1
0
Fork 0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2026-10-18 04:41:19 +02:00
Code Issues Projects Releases Wiki Activity

fix(bitbucket): auth failure due to Bitbucket API changes (#3477)

Browse Source 
* fix: #3428 bybitbucket auth failure by changing token n validation flow to use Authentication header instead of query param

Co-authored-by: aviralgarg05 <gargaviral99@gmail.com>
Signed-off-by: Mohammad Hassan <m8fouad@gmail.com>
Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz>

* fix: added changelog entry and added tests to verify bitbucket auth header fix

Signed-off-by: Mohammad Hassan <m8fouad@gmail.com>

* fix(bitbucket): aded support for limiting login for workspace members and handled deprecated team api and added test cases

Signed-off-by: Mohammad Hassan <m8fouad@gmail.com>

* docs(bitbucket): applied missing docs changes

Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz>

---------

Signed-off-by: Mohammad Hassan <m8fouad@gmail.com>
Signed-off-by: Jan Larwig <jan.larwig@digits.schwarz>
Co-authored-by: aviralgarg05 <gargaviral99@gmail.com>
Co-authored-by: Jan Larwig <jan.larwig@digits.schwarz>
This commit is contained in:
Mohammad Fouad
2026-10-01 09:00:53 +02:00
committed by GitHub
co-authored by aviralgarg05 Jan Larwig
parent b0d87093a8
commit bde7f9eee1
10 changed files with 197 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/versioned_docs/version-7.15.x/configuration/alpha_config.md
+2 -1
View File
@@ -331,7 +331,8 @@ They may change between releases without notice.
| Field | Type | Description |
| ----- | ---- | ----------- |
| `team` | _string_ | Team sets restrict logins to members of this team |
| `team` | _string_ | Team sets restrict logins to members of this team - Bitbucket has deprecated the teams, it will act as workspace instead |
| `workspace` | _string_ | Workspace sets restrict logins to members of this workspace, use workspace slug |
| `repository` | _string_ | Repository sets restrict logins to user with access to this repository |
### ClaimSource
docs/versioned_docs/version-7.15.x/configuration/providers/bitbucket.md
+9 -4
View File
@@ -8,7 +8,7 @@ title: BitBucket
hostname that oauth2-proxy is running on.
* In Permissions section select:
* Account -> Email
* Team membership -> Read
* Account -> Read [Required for workspace membership check]
* Repositories -> Read
2. Note the Client ID and Client Secret.
@@ -20,6 +20,11 @@ To use the provider, pass the following options:
--client-secret=<Client Secret>
```
The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team
members use additional configuration option: `--bitbucket-team=<Team name>`. To restrict the access to only these users
who have access to one selected repository use `--bitbucket-repository=<Repository name>`.
The default configuration allows everyone with Bitbucket account to authenticate.
To restrict the access to members of a specific workspace, use the additional configuration option: `--bitbucket-workspace=<Workspace name>`.
To restrict the access to users who have write access to one selected repository (contributors) use `--bitbucket-repository=<Repository name>`. Note that repository full name format `owner/repo` is required, for example `--bitbucket-repository=myworkspace/myrepo`.
**Deprecated**: To restrict the access to members of a specific team, use the additional configuration option: `--bitbucket-team=<Team name>`. Note that this option is deprecated and will be removed in a future release. Please use `--bitbucket-workspace` instead. For more info, see [Bitbucket teams API deprecation](https://developer.atlassian.com/cloud/bitbucket/bitbucket-api-teams-deprecation/).