Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-30384

Add CrumbExclusion for mercurial hooks

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Minor Minor
    • bitbucket-plugin
    • mercurial-plugin 1.54, "Prevent Cross Site Request Forgery exploits" enabled

      The the "Webhooks" functionality of Bitbucket only allows to generate POST requests. I would like to use it to trigger builds on Jenkins, but I get the following message in jenkins.log:

      Sep 10, 2015 12:43:44 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /bitbucket-hook. Returning 403.

          [JENKINS-30384] Add CrumbExclusion for mercurial hooks

          Aldo Brucale created issue -
          Aldo Brucale made changes -
          Description New: The the "Webhooks" functionality of Bitbucket only allows to generate POST requests. I would like to use it to trigger builds on Jenkins, but I get the following message in jenkins.log:

          Sep 10, 2015 12:43:44 PM hudson.security.csrf.CrumbFilter doFilter
          WARNING: No valid crumb was included in request for /bitbucket-hook. Returning 403.

          Jesse Glick added a comment -

          While the /mercurial endpoint may well need a crumb exclusion (never been reported AFAIK), this hook is in another plugin.

          Jesse Glick added a comment - While the /mercurial endpoint may well need a crumb exclusion (never been reported AFAIK), this hook is in another plugin.
          Jesse Glick made changes -
          Component/s New: bitbucket-plugin [ 18755 ]
          Component/s Original: mercurial-plugin [ 15502 ]
          Labels New: crumb mercurial webhook
          Jesse Glick made changes -
          Assignee Original: Jesse Glick [ jglick ]
          Jesse Glick made changes -
          Remote Link New: This issue links to "mercurial-plugin PR 71 (Web Link)" [ 13147 ]
          R. Tyler Croy made changes -
          Workflow Original: JNJira [ 165490 ] New: JNJira + In-Review [ 181997 ]

          Tzach Solomon added a comment -

          jglick I think there is a mistake and the component bitbucket-plugin by mistake. Am I right or am I missing something?

          Tzach Solomon added a comment - jglick I think there is a mistake and the component bitbucket-plugin by mistake. Am I right or am I missing something?

          Jesse Glick added a comment -

          I have no idea what this is, I was just moving it out of the wrong component.

          Jesse Glick added a comment - I have no idea what this is, I was just moving it out of the wrong component.

          Tzach Solomon added a comment -

          jglick I think that bitbucket-plugin is also the wrong the component.

          Tzach Solomon added a comment - jglick I think that bitbucket-plugin is also the wrong the component.

            tzach_solomon Tzach Solomon
            abrucale Aldo Brucale
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: