Bug Fixes

• Updated 3rd party dependencies to resolve vulnerabilities
• Fixed an issue where the user session terminates if the URL path contained "/logout"

Improvements

• Made improvements in the error handling of the On-The-Group Mapping section
• Made improvements in the execution flow of the "Group Filter" and "Regex On Group Names" features

Bug Fixes

• Updated 3rd party dependencies to resolve vulnerabilities
• Fixed an issue where the user session terminates if the URL path contained "/logout"

Improvements

• Made improvements in the error handling of the On-The-Group Mapping section
• Made improvements in the execution flow of the "Group Filter" and "Regex On Group Names" features

Bugfix for the default way of sending the authentication parameters in Token requests which was changed in 1.0.23

Bugfix for the default way of sending the authentication parameters in Token requests which was changed in 1.0.23

New Features

• Added an option to choose whether to send parameters in request header or request body.
• Added an option to allow users to change passwords.
• Added an option to enable debug logging from within the plugin itself.
• Added access restrictions on internal plugin APIs
• Added an option to Exclude certain groups from On The Fly group mapping flows.

Bug Fix

• Added a fix for the logout flow when the URL contains the logout keyword.
• Fixed an issue of SSO failure for new users when Login/Search user account by: email
• Fixed an issue in SSO initiation flow.

New Features

• Added an option to choose whether to send parameters in request header or request body.
• Added an option to allow users to change passwords.
• Added an option to enable debug logging from within the plugin itself.
• Added access restrictions on internal plugin APIs
• Added an option to Exclude certain groups from On The Fly group mapping flows.

Bug Fix

• Added a fix for the logout flow when the URL contains the logout keyword.
• Fixed an issue of SSO failure for new users when Login/Search user account by: email
• Fixed an issue in SSO initiation flow.

Improvements

• Updated the forum information.

Bugfixes

• Bug-fix for groups from IDP not getting mapped for some IDP like keycloak,etc.
• Bug-fix for default groups not getting applied appropriately after logging in.

Improvement

• Updated the forum information.

Bugfixes

• Bug-fix for groups from IDP not getting mapped for some IDP like keycloak,etc.
• Bug-fix for default groups not getting applied appropriately after logging in.

Improvement

• Updated the support contact information.

Bugfixes

• Bug-fix for full Name attribute and firstName/lastname not getting mapped from idp Response.
• Bug-fix for SSO users' groups do not get updated appropriately after logging in.

Improvement

• Updated the support contact information.

Bugfixes

• Bug-fix for full Name attribute and firstName/lastname not getting mapped from idp Response.
• Bug-fix for SSO users' groups do not get updated appropriately after logging in.

New Feature:

• Option to select user directory for new user creation

Bugfix:

• Bugfix for a new user not getting created.
• Bugfix for new groups not getting created in On-the-fly group mapping configuration

New Feature:

• Option to select user directory for new user creation

Bugfix:

• Bugfix for a new user not getting created.
• Bugfix for new groups not getting created in On-the-fly group mapping configuration

• Added Video Guides for quick setup
• Fixed a redirection issues which occurs when user tries to log in from a specific URL

• Added Video Guides for quick setup
• Fixed a redirection issues which occurs when user tries to log in from a specific URL

• Added a feature to support Group REGEX for the Just In Time Group Provisioning
• Fixed Issue with Double quote in Username in OAuth Response.

• Added a feature to support Group REGEX for the Just In Time Group Provisioning
• Fixed Issue with Double quote in Username in OAuth Response

• Fixed wrong redirection after successful SSO authentication
• Bugfix for identifying the SSO authenticated user with the default username/email mapping.

• Fixed wrong redirection after successful SSO authentication
• Bugfix for identifying the SSO authenticated user with the default username/email mapping

• Added Remember Me cookie, which allows user session to be maintained until the user explicitly logs out
• Fixed possibilities of user session conflicts and wrong redirection after successful SSO
• Fixed infinite SSO loop issue due to login cookie timeout

• Added Remember Me cookie, which allows user session to be maintained until the user explicitly logs out
• Fixed possibilities of user session conflicts and wrong redirection after successful SSO
• Fixed infinite SSO loop issue due to login cookie timeout

Features -

• Support for Gluu Server as an OAuth Provider
• Support for GitLab OnPremise as an OAuth Provider
• Support for miniOrange as an OAuth Provider
• Added option to configure additional authorization parameters requested by OAuth/OIDC provider
• Customizable Backdoor/Emergency URL
• Filter incoming groups from OAuth/OIDC provider based on "Start with", "contain" and "regular expression"
• Added option to restore/backup app configuration through REST API
• Customizable Login Template
• Added option to set SSO redirection delay time
• Support for multiple Email Attributes

Improvements -

• Git Authentication support for Bitbucket OAuth and OIDC Providers
• Added signature validation for Salesforce, Keycloak, and Azure AD Providers
• Added Issuer Check for Keycloak and Azure AD Providers
• Added an option to set App Name for custom OAuth and OpenID Providers
• Added a copy button for Backdoor/Emergency URL

Features -

• Support for Gluu Server as an OAuth Provider
• Support for GitLab OnPremise as an OAuth Provider
• Support for miniOrange as an OAuth Provider
• Added option to configure additional authorization parameters requested by OAuth/OIDC provider
• Customizable Backdoor/Emergency URL
• Filter incoming groups from OAuth/OIDC provider based on "Start with", "contain" and "regular expression"
• Added option to restore/backup app configuration through REST API
• Customizable Login Template
• Added option to set SSO redirection delay time
• Support for multiple Email Attributes

Improvements -

• Git Authentication support for Bitbucket OAuth and OIDC Providers
• Added signature validation for Salesforce, Keycloak, and Azure AD Providers
• Added Issuer Check for Keycloak and Azure AD Providers
• Added an option to set App Name for custom OAuth and OpenID Providers
• Added a copy button for Backdoor/Emergency URL

• Added documentation guide for setting up SSO with any OAuth provider
• Added documentation guide for setting up SSO with any OpenID provider

• Added documentation guide for setting up SSO with any OAuth provider
• Added documentation guide for setting up SSO with any OpenID provider

New Features

• Added a configurable option to enable and disable SSO
• Added support for OIDC Logout Endpoint

Improvements

• Added separator in the Select Application list for providers supports OAuth and OpenID
• minor UI changes

New Features

• Added a configurable option to enable and disable SSO
• Added support for OIDC Logout Endpoint

Improvements

• Added separator in the Select Application list for providers supports OAuth and OpenID
• minor UI changes

Features

• Added support for JWKS endpoint
• Added Support for Metadata endpoint to fetch OIDC endpoints in a click
• Added acr_value check option for custom applications to send it in the authorization request
• Added nonce check option for custom applications to send it in the authorization request
• Added an option to allow Backdoor URL access only for the selected user group permissions
• Added customizable Error Message Template
• Added customizable Logout Templates
• Added User Directory Info tab with details on how directories and permissions can be managed

Improvements

• Improvements in the login using Username flow if the email is not present in the response
• UI changes for Sign In Settings tab
• Updated setup guides

Features

• Added support for JWKS endpoint
• Added Support for Metadata endpoint to fetch OIDC endpoints in a click
• Added acr_value check option for custom applications to send it in the authorization request
• Added nonce check option for custom applications to send it in the authorization request
• Added an option to allow Backdoor URL access only for the selected user group permissions
• Added customizable Error Message Template
• Added customizable Logout Templates
• Added User Directory Info tab with details on how directories and permissions can be managed

Improvements

• Improvements in the login using Username flow if the email is not present in the response
• UI changes for Sign In Settings tab
• Updated setup guides

Added support for RSA512 in addition to the RSA256 algorithm for JWT signature verification.

Added support for RSA512 in addition to the RSA256 algorithm for JWT signature verification.

New Features:

• Assign Default Group for New, All users and None
• Added On the Fly Group Creation and Mapping
• Support for Okta, Salesforce, Github Enterprise, Azure AD and Azure B2C as default apps along with setup guide

Bug Fixes:

• Fixed group mapping issues if wrong groups are mapped
• Fixed an issue which throws an error if default groups are blank while importing settings file

UI Improvements:

• Changed User Groups tab UI
• Updated Import / Export plugin configurations tab name to Backup/Restore Configurations

New Features:

• Assign Default Group for New, All users and None
• Added On the Fly Group Creation and Mapping
• Support for Okta, Salesforce, Github Enterprise, Azure AD and Azure B2C as default apps along with setup guide

Bug Fixes:

• Fixed group mapping issues if wrong groups are mapped
• Fixed an issue which throws an error if default groups are blank while importing settings file

UI Improvements:

• Changed User Groups tab UI
• Updated Import / Export plugin configurations tab name to Backup/Restore Configurations

Resolved duplicate dependency issue for spring-scanner-annotation classes.

Resolved duplicate dependency issue for spring-scanner-annotation classes.

New Features:

• Apply Regex functionality on Username field.
• Create OAuth/OpenID provider groups in Bitbucket with On the fly group mapping.
• Added Import / Export plugin configurations.
• Added an option to restrict new user creation in Bitbucket.
• Added Feedback form.

Bug Fixes:

• Fixed an issue of not removing users from empty groups list on SSO.
• Fixed an issue where users were authenticated successfully (with the wrong set of credentials) if the mapping was not correct.
• Fixed redirect loop issue if the user does not have permission access and auto-redirect is enabled.

Updated all the existing setup guides for configuring apps in the plugin

New Features:

• Apply Regex functionality on Username field.
• Create OAuth/OpenID provider groups in Bitbucket with On the fly group mapping.
• Added Import / Export plugin configurations.
• Added an option to restrict new user creation in Bitbucket.
• Added Feedback form.

Bug Fixes:

• Fixed an issue of not removing users from empty groups list on SSO.
• Fixed an issue where users were authenticated successfully (with the wrong set of credentials) if the mapping was not correct.
• Fixed redirect loop issue if the user does not have permission access and auto-redirect is enabled.

Updated all the existing setup guides for configuring apps in the plugin

• A security fix was released for manual user login when the plugin was enabled. It was not properly validating user password.

• A security fix was released for manual user login when the plugin was enabled. It was not properly validating user password.

Changed Contact Us Details in Troubleshooting tab.

• Compatibility with Data Center
• Force SSO(Auto-redirect to OAuth/OpenID Server on the access of the Bamboo login page)

• Compatibility with Data Center
• Force SSO(Auto-redirect to OAuth/OpenID Server on the access of the Bamboo login page)

Features:

• Support for OpenID Protocol
• Added Keycloak as Default App
• Added AWS Cognito as Default App
• Added ADFS as Default App
• Support for the state parameter in the Authorization request
• Added Issuer Check
• Custom Logout URL

Fixes:

• Mapping Groups using User Info Endpoint
• Fixed JSONArray parsing issue
• Fixed Google Apps group

Updated setup guides.

• Compatibility update with Bitbucket Server 6
• Fixed an issue related to login via username for existing users
• Fixed Group Mapping issue

Bug fixes and tab name changes

• Fixed login button issue for the French language
• Fixed an issue where the script was conflicting with Bitbucket Search box
• Scope if optional for custom applications
• Changes in tab names:
  • Attribute Mapping -> User Profile
  • Group Mapping -> User Groups
  • Support -> Troubleshooting

First release of the OAuth Client for Bitbucket