Only improved the text of a log message.
Version history
2.5.2Bitbucket Data Center 7.6.0 - 8.19.12024-01-22Minor Bugfix Version 2.5.2 • Released 2024-01-22 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial2.5.2Bitbucket Server 7.6.0 - 8.19.12024-01-22Minor Bugfix Version 2.5.2 • Released 2024-01-22 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialOnly improved the text of a log message.
2.5.1Bitbucket Data Center 7.6.0 - 8.14.12023-10-31Improvement Release Version 2.5.1 • Released 2023-10-31 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Optimised app-configuration processing for performance
2.5.1Bitbucket Server 7.6.0 - 8.14.12023-10-31Improvement Release Version 2.5.1 • Released 2023-10-31 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Optimised app-configuration processing for performance
2.4.1Bitbucket Data Center 7.6.0 - 8.19.12023-09-12Bugfix Release Version 2.4.1 • Released 2023-09-12 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialFixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.
2.4.1Bitbucket Server 7.6.0 - 8.19.12023-09-12Bugfix Release Version 2.4.1 • Released 2023-09-12 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialFixed a bug preventing a successful Bearer Authentication with other authenticators even if they were still allowed.
2.4.0Bitbucket Data Center 7.6.0 - 8.19.12023-09-07New Feature & Improvements Version 2.4.0 • Released 2023-09-07 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialPlease refer to the release notes for more details.
2.4.0Bitbucket Server 7.6.0 - 8.19.12023-09-07New Feature & Improvements Version 2.4.0 • Released 2023-09-07 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialPlease refer to the release notes for more details.
2.3.1Bitbucket Data Center 7.6.0 - 8.19.12023-08-143rd-Party Library Updates Version 2.3.1 • Released 2023-08-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated OkHttp and Okio libraries
2.3.1Bitbucket Server 7.6.0 - 8.19.12023-08-143rd-Party Library Updates Version 2.3.1 • Released 2023-08-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated OkHttp and Okio libraries
2.3.0Bitbucket Data Center 7.6.0 - 8.19.12023-07-17New Feature Version 2.3.0 • Released 2023-07-17 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.
2.3.0Bitbucket Server 7.6.0 - 8.19.12023-07-17New Feature Version 2.3.0 • Released 2023-07-17 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded configuration option to limit the number of maximum active tokens a user can have at a time. Read more about it in our documentation.
2.2.4Bitbucket Server 7.6.0 - 8.19.12023-02-27Bugfix Release Version 2.2.4 • Released 2023-02-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.
2.2.4Bitbucket Data Center 7.6.0 - 8.19.12023-02-27Bugfix Release Version 2.2.4 • Released 2023-02-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded log file entry in case Bearer Authentication with a token fails. Please be aware that these failures are currently not audit-logged. We'll add this soon in an upcoming release.
2.2.3Bitbucket Server 7.6.0 - 8.8.02023-02-14Bugfix Release Version 2.2.3 • Released 2023-02-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialFixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.
2.2.3Bitbucket Data Center 7.6.0 - 8.8.02023-02-14Bugfix Release Version 2.2.3 • Released 2023-02-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialFixed a bug affecting the log file entries for tokens deleted on behalf of another user. The records mentioned the wrong user key. The audit log was not affected by that bug.
2.2.2Bitbucket Server 7.6.0 - 8.19.12022-12-12Internal Library Updates Version 2.2.2 • Released 2022-12-12 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated two internal libraries
2.2.2Bitbucket Data Center 7.6.0 - 8.19.12022-12-12Internal Library Updates Version 2.2.2 • Released 2022-12-12 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated two internal libraries
2.2.1Bitbucket Server 7.6.0 - 8.19.12022-11-14New Feature & Improvement Release Version 2.2.1 • Released 2022-11-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Feature
- accept authentication with API tokens on selected cluster nodes only, read more about it here
Improvement
- returning the id of a token in the create-token REST response
- the id is required to delete tokens via REST API
2.2.1Bitbucket Data Center 7.6.0 - 8.19.12022-11-14New Feature & Improvement Release Version 2.2.1 • Released 2022-11-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Feature
- accept authentication with API tokens on selected cluster nodes only, read more about it here
Improvement
- returning the id of a token in the create-token REST response
- the id is required to delete tokens via REST API
2.1.0Bitbucket Server 5.5.0 - 8.19.12022-09-19New Features & UX/ UI Improvements, Minor Bugfixes Version 2.1.0 • Released 2022-09-19 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Features
- individual IP address restrictions for API tokens
- in addition to IP address restrictions that the admin might have defined already, users can assign these on a per token basis
- (HTTP) header/ value access rules for API tokens
- read more about it in our documentation
Changes
- UX/ UI improvements to accommodate new features
Bugfixes
- fixed a bug where users creating a token for themselves got an error that providing an OpenPGP public key is required
- that only happened when admins enabled mandatory OpenPGP encryption for tokens created on behalf
- individual IP address restrictions for API tokens
2.1.0Bitbucket Data Center 5.5.0 - 8.19.12022-09-19New Features & UX/ UI Improvements, Minor Bugfixes Version 2.1.0 • Released 2022-09-19 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Features
- individual IP address restrictions for API tokens
- in addition to IP address restrictions that the admin might have defined already, users can assign these on a per token basis
- (HTTP) header/ value access rules for API tokens
- read more about it in our documentation
Changes
- UX/ UI improvements to accommodate new features
Bugfixes
- fixed a bug where users creating a token for themselves got an error that providing an OpenPGP public key is required
- that only happened when admins enabled mandatory OpenPGP encryption for tokens created on behalf
- individual IP address restrictions for API tokens
2.0.5Bitbucket Server 5.5.0 - 8.19.12022-08-313rd party and internal library updates Version 2.0.5 • Released 2022-08-31 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNo release notes.2.0.5Bitbucket Data Center 5.5.0 - 8.19.12022-08-313rd party and internal library updates Version 2.0.5 • Released 2022-08-31 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNo release notes.2.0.3Bitbucket Server 5.5.0 - 8.19.12022-06-14Security Hardening Version 2.0.3 • Released 2022-06-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- further hardening against username enumeration
- in addition to the changes in version 2.0.2, the error message in a 401 response is now identical to the one Atlassian sends: "Invalid username or password."
- further hardening against username enumeration
2.0.3Bitbucket Data Center 5.5.0 - 8.19.12022-06-14Security Hardening Version 2.0.3 • Released 2022-06-14 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- further hardening against username enumeration
- in addition to the changes in version 2.0.2, the error message in a 401 response is now identical to the one Atlassian sends: "Invalid username or password."
- further hardening against username enumeration
2.0.2Bitbucket Server 5.5.0 - 8.19.12022-06-07Bugfix & Security Hardening Version 2.0.2 • Released 2022-06-07 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- fixed a bug that caused UI not to load if the user logged in has no e-mail address set
- hardened app against username enumeration
- removed mentions of usernames in responses that led to 401 - Unauthenticated
- for troubleshooting purposes, admins can still look up details of authentication failures in the log files
- Updated internal and 3rd party libraries
2.0.2Bitbucket Data Center 5.5.0 - 8.19.12022-06-07Bugfix & Security Hardening Version 2.0.2 • Released 2022-06-07 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- fixed a bug that caused UI not to load if the user logged in has no e-mail address set
- hardened app against username enumeration
- removed mentions of usernames in responses that led to 401 - Unauthenticated
- for troubleshooting purposes, admins can still look up details of authentication failures in the log files
- Updated internal and 3rd party libraries
2.0.1Bitbucket Server 5.5.0 - 8.19.12022-05-16Bugfix/ Library Updates/ UI Text Changes Version 2.0.1 • Released 2022-05-16 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Fixed a bug that caused usernames not to be shown in the token manager tab
- Updated internal and 3rd party libraries
- Improved text/ wording of a few element descriptions in the UI
2.0.1Bitbucket Data Center 5.5.0 - 8.19.12022-05-16Bugfix/ Library Updates/ UI Text Changes Version 2.0.1 • Released 2022-05-16 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Fixed a bug that caused usernames not to be shown in the token manager tab
- Updated internal and 3rd party libraries
- Improved text/ wording of a few element descriptions in the UI
2.0.0Bitbucket Server 5.5.0 - 7.21.42022-04-28New Features & Improvements Version 2.0.0 • Released 2022-04-28 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Features
- Audit logging of configuration changes
- OpenPGP Encryption for tokens created on behalf
- Tags/ Notes for IP address restrictions
Changes
- Users who can't create their own tokens but can use tokens can now see a list of their tokens, i.e. to see expiration dates or other details
- The list of tokens now shows an expiration warning if a token expires within the next 14 days
- Changed texts in the permission settings so that it's more clear what the on-behalf permission implies
2.0.0Bitbucket Data Center 5.5.0 - 7.21.42022-04-28New Features & Improvements Version 2.0.0 • Released 2022-04-28 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialNew Features
- Audit logging of configuration changes
- OpenPGP Encryption for tokens created on behalf
- Tags/ Notes for IP address restrictions
Changes
- Users who can't create their own tokens but can use tokens can now see a list of their tokens, i.e. to see expiration dates or other details
- The list of tokens now shows an expiration warning if a token expires within the next 14 days
- Changed texts in the permission settings so that it's more clear what the on-behalf permission implies
1.9.5Bitbucket Server 5.5.0 - 7.21.42022-02-22Internal Library Updates Version 1.9.5 • Released 2022-02-22 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated an authentication library to its latest version to support all Atlassian platforms, including the latest Jira versions
1.9.5Bitbucket Data Center 5.5.0 - 7.21.42022-02-22Internal Library Updates Version 1.9.5 • Released 2022-02-22 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialUpdated an authentication library to its latest version to support all Atlassian platforms, including the latest Jira versions
1.9.4Bitbucket Server 5.5.0 - 7.21.42022-02-08Improvement Release Version 1.9.4 • Released 2022-02-08 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded logging of rate-limited requests. Read more about it here: https://wiki.resolution.de/doc/api-token-authentication/1.9.x/admin-guide/logging/logging-in-bitbucket#id-.LogginginBitbucketv1.9.x-RateLimitedRequests
1.9.4Bitbucket Data Center 5.5.0 - 7.21.42022-02-08Improvement Release Version 1.9.4 • Released 2022-02-08 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAdded logging of rate-limited requests. Read more about it here: https://wiki.resolution.de/doc/api-token-authentication/1.9.x/admin-guide/logging/logging-in-bitbucket#id-.LogginginBitbucketv1.9.x-RateLimitedRequests
1.9.3Bitbucket Server 5.5.0 - 7.21.42022-02-03Bugfix And Minor Changes (Audit log texts/ UI Elements only) Version 1.9.3 • Released 2022-02-03 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- fixed a bug that prevented users from successfully cloning a repository with a read-only token
- changed a few wordings in description texts of the audit logging page
- changed text for the audit/ log entry "user tried to authenticate with an invalid token or regular password" to "user is authenticating with an invalid token, or with a regular password"
- added a warning so that admins are aware of the fact that tokens that have been created before rate-limiting was enabled won't be rate-limited
1.9.3Bitbucket Data Center 5.5.0 - 7.21.42022-02-03Bugfix And Minor Changes (Audit log texts/ UI Elements only) Version 1.9.3 • Released 2022-02-03 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- fixed a bug that prevented users from successfully cloning a repository with a read-only token
- changed a few wordings in description texts of the audit logging page
- changed text for the audit/ log entry "user tried to authenticate with an invalid token or regular password" to "user is authenticating with an invalid token, or with a regular password"
- added a warning so that admins are aware of the fact that tokens that have been created before rate-limiting was enabled won't be rate-limited
1.9.2Bitbucket Server 5.5.0 - 7.19.32022-01-27Bugfix For New Rate Limiting Feature Version 1.9.2 • Released 2022-01-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialSince version 1.9.x the app offers functionality to apply rate limits to requests authenticated with API Tokens. Read more about rate-limiting here: https://wiki.resolution.de/go/ata/rate-limit-admin
This bugfix adds a missing database field annotation so that updating the app on instances with MS SQL databases works flawlessly.
If you already updated to 1.9.0/1 and use MS SQL, please contact us at https://www.resolution.de/go/support.
1.9.2Bitbucket Data Center 5.5.0 - 7.19.32022-01-27Bugfix For New Rate Limiting Feature Version 1.9.2 • Released 2022-01-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialSince version 1.9.x the app offers functionality to apply rate limits to requests authenticated with API Tokens. Read more about rate-limiting here: https://wiki.resolution.de/go/ata/rate-limit-admin
This bugfix adds a missing database field annotation so that updating the app on instances with MS SQL databases works flawlessly.
If you already updated to 1.9.0/1 and use MS SQL, please contact us at https://www.resolution.de/go/support.
1.8.4Bitbucket Server 5.5.0 - 7.21.42022-01-10Improvement Release Version 1.8.4 • Released 2022-01-10 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- extended audit logging so that failed authentication due to IP address restrictions is logged as well
- until this version, this only happened when the app was configured to prevent Basic Authentication with regular passwords
- extended audit logging so that failed authentication due to IP address restrictions is logged as well
1.8.4Bitbucket Data Center 5.5.0 - 7.21.42022-01-10Improvement Release Version 1.8.4 • Released 2022-01-10 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- extended audit logging so that failed authentication due to IP address restrictions is logged as well
- until this version, this only happened when the app was configured to prevent Basic Authentication with regular passwords
- extended audit logging so that failed authentication due to IP address restrictions is logged as well
1.8.2Bitbucket Server 5.5.0 - 7.21.42021-10-25Bugfix Release Version 1.8.2 • Released 2021-10-25 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Fixed a bug in IP address verification that caused client requests to be rejected even though they were in a range permitted
- Hardened and upgraded the internal license checker library to prevent issues when applying a new Atlassian application license
1.8.2Bitbucket Data Center 5.5.0 - 7.21.42021-10-25Bugfix Release Version 1.8.2 • Released 2021-10-25 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Fixed a bug in IP address verification that caused client requests to be rejected even though they were in a range permitted
- Hardened and upgraded the internal license checker library to prevent issues when applying a new Atlassian application license
1.8.1Bitbucket Data Center 5.5.0 - 7.21.42021-07-27New Feature & Improvements Version 1.8.1 • Released 2021-07-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Added a REST token test endpoint for support- and troubleshooting purposes, read more about it in our documentation
- Now returning authentication failure responses without HTML code wrapped around
1.8.1Bitbucket Server 5.5.0 - 7.21.42021-07-27New Feature & Improvements Version 1.8.1 • Released 2021-07-27 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • Commercial- Added a REST token test endpoint for support- and troubleshooting purposes, read more about it in our documentation
- Now returning authentication failure responses without HTML code wrapped around
1.7.1Bitbucket Server 5.5.0 - 7.21.42021-06-28Improvement & Bugfix Release Version 1.7.1 • Released 2021-06-28 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialBugfix:
- API Token Authentication returned 401 even with valid tokens
- this was most likely only an issue surfacing in the latest Bitbucket versions 7.12, 7.13 or 7.14
REST API only: when creating a token on behalf, the user key provided in the payload is validated first. If it doesn't belong to a user, HTTP status 400 and a message are returned.
To get familiar with the app, please refer to our documentation: https://wiki.resolution.de/doc/api-token-authentication/latest
- API Token Authentication returned 401 even with valid tokens
1.7.1Bitbucket Data Center 5.5.0 - 7.21.42021-06-28Improvement & Bugfix Release Version 1.7.1 • Released 2021-06-28 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialBugfix:
- API Token Authentication returned 401 even with valid tokens
- this was most likely only an issue surfacing in the latest Bitbucket versions 7.12, 7.13 or 7.14
REST API only: when creating a token on behalf, the user key provided in the payload is validated first. If it doesn't belong to a user, HTTP status 400 and a message are returned.
To get familiar with the app, please refer to our documentation: https://wiki.resolution.de/doc/api-token-authentication/latest
- API Token Authentication returned 401 even with valid tokens
1.7.0Bitbucket Server 5.5.0 - 7.21.42021-04-19New Feature Version 1.7.0 • Released 2021-04-19 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAPI tokens can now also be used as bearer tokens, read more about it in our documentation
1.7.0Bitbucket Data Center 5.5.0 - 7.21.42021-04-19New Feature Version 1.7.0 • Released 2021-04-19 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialAPI tokens can now also be used as bearer tokens, read more about it in our documentation
1.6.3Bitbucket Server 5.5.0 - 7.21.42021-03-25Security Improvements/ New Feature Version 1.6.3 • Released 2021-03-25 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialSecurity Improvement
- Immediately invalidate active sessions that have been created with API tokens and have expired or were deleted in the meantime (Previously the session remained active until the session timeout was reached)
New Feature
- Added option to disable Session Cookie Based Authentication
1.6.3Bitbucket Data Center 5.5.0 - 7.21.42021-03-25Security Improvements/ New Feature Version 1.6.3 • Released 2021-03-25 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialSecurity Improvement
- Immediately invalidate active sessions that have been created with API tokens and have expired or were deleted in the meantime (Previously the session remained active until the session timeout was reached)
New Feature
- Added option to disable Session Cookie Based Authentication
1.6.1Bitbucket Server 5.5.0 - 7.21.42021-03-25Initial Bitbucket Release Version 1.6.1 • Released 2021-03-25 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialInitial Bitbucket Release
1.6.1Bitbucket Data Center 5.5.0 - 7.21.42021-02-16Initial Bitbucket Release Version 1.6.1 • Released 2021-02-16 • Supported By resolution Reichert Network Solutions GmbH • Paid via Atlassian • CommercialInitial Bitbucket Release