-
Bug
-
Resolution: Cannot Reproduce
-
Critical
When trying to scan for branches using the user which has two-step verification enabled, I get the following error:
Started [Mon Jun 26 11:04:33 CEST 2017] Starting branch indexing... ERROR: [Mon Jun 26 11:04:33 CEST 2017] Could not update folder level actions from source 85788dfe-8acb-4d5b-b6c5-64622c0ae982 com.cloudbees.jenkins.plugins.bitbucket.api.BitbucketRequestException: HTTP request error. Status: 403: Forbidden. To make an API call, you need to use an app password. at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRequest(BitbucketCloudApiClient.java:572) at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRepository(BitbucketCloudApiClient.java:236) at com.cloudbees.jenkins.plugins.bitbucket.BitbucketSCMSource.retrieveActions(BitbucketSCMSource.java:689) at jenkins.scm.api.SCMSource.fetchActions(SCMSource.java:691) at jenkins.branch.MultiBranchProject.computeChildren(MultiBranchProject.java:587) at com.cloudbees.hudson.plugins.folder.computed.ComputedFolder.updateChildren(ComputedFolder.java:266) at com.cloudbees.hudson.plugins.folder.computed.FolderComputation.run(FolderComputation.java:162) at jenkins.branch.MultiBranchProject$BranchIndexing.run(MultiBranchProject.java:969) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:415) [Mon Jun 26 11:04:33 CEST 2017] Finished branch indexing. Indexing took 0.35 sec FATAL: Failed to recompute children of ocr-engine com.cloudbees.jenkins.plugins.bitbucket.api.BitbucketRequestException: HTTP request error. Status: 403: Forbidden. To make an API call, you need to use an app password. at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRequest(BitbucketCloudApiClient.java:572) at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRepository(BitbucketCloudApiClient.java:236) at com.cloudbees.jenkins.plugins.bitbucket.BitbucketSCMSource.retrieveActions(BitbucketSCMSource.java:689) at jenkins.scm.api.SCMSource.fetchActions(SCMSource.java:691) at jenkins.branch.MultiBranchProject.computeChildren(MultiBranchProject.java:587) at com.cloudbees.hudson.plugins.folder.computed.ComputedFolder.updateChildren(ComputedFolder.java:266) at com.cloudbees.hudson.plugins.folder.computed.FolderComputation.run(FolderComputation.java:162) at jenkins.branch.MultiBranchProject$BranchIndexing.run(MultiBranchProject.java:969) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:415) Finished: FAILURE
We would like to enable enforcement for all our developers to use two-step verification for logging into BitBucket, but are unable to do so until Bitbucket branch source plugin gets the ability to use app password for making API calls.
[JENKINS-45129] Unable to scan branches in multibranch plugin when user has two-step verification enabled
Nenad Miksa
created issue -
| Labels | New: technical-debt |
Nenad Miksa
made changes -
| Assignee | Original: Antonio Muñiz [ amuniz ] | New: Nenad Miksa [ dodoent ] |
Nenad Miksa
added a comment - This issue is still present in v2.2.9. Didn't 2.2.5 suppose to move to Bitbucket API v2?
Nenad Miksa
added a comment - This issue is still present in v2.2.9. Didn't 2.2.5 suppose to move to Bitbucket API v2? Nenad Miksa
made changes -
| Assignee | Original: Nenad Miksa [ dodoent ] |
Having the same issue. With SAML/SSO configured, App Passwords do not work.
Using bitbucket-branch-source-plugin version 2.2.14
Nenad Miksa
added a comment - For me it works if I setup the app password using the groovy script, as described here: https://wiki.jenkins.io/display/JENKINS/Bitbucket+Branch+Source+Plugin#BitbucketBranchSourcePlugin-ConfigurepluginviaGroovyscript
However, if I setup the app password using UI, then it is treated as normal password and it doesn't work.
Hope this helps...
Nenad Miksa
added a comment - For me it works if I setup the app password using the groovy script, as described here: https://wiki.jenkins.io/display/JENKINS/Bitbucket+Branch+Source+Plugin#BitbucketBranchSourcePlugin-ConfigurepluginviaGroovyscript
However, if I setup the app password using UI, then it is treated as normal password and it doesn't work.
Hope this helps...
dodoent, thanks for following up with your experiences and leaving a comment 
If I understand you correctly, the groovy code you linked is using the Bitbucket username and not the email address (where the Bitbucket username is configurable when logged in under the Profile).
When I originally tried the App Password credential last week, I was using the Bitbucket email-address of the user and NOT the username. Right now, with two-step verification off, I am using email-address/password and things are working. That email-address/username difference might be what caused my issue in trying App Passwords. I'll try to do some testing this week.
In your configuration, are you using the Bitbucket username?
Nenad Miksa
added a comment - Yes, I am using Bitbucket username.
If I enable enforcement for two-step verification, scanning results with following error:
[Mon Jun 26 11:15:54 CEST 2017] Starting branch indexing... ERROR: [Mon Jun 26 11:15:54 CEST 2017] Could not update folder level actions from source 85788dfe-8acb-4d5b-b6c5-64622c0ae982 com.cloudbees.jenkins.plugins.bitbucket.api.BitbucketRequestException: HTTP request error. Status: 403: Forbidden. {"type": "error", "error": {"message": "To access this repository, enable two-step verification."}} at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRequest(BitbucketCloudApiClient.java:572) at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRepository(BitbucketCloudApiClient.java:236) at com.cloudbees.jenkins.plugins.bitbucket.BitbucketSCMSource.retrieveActions(BitbucketSCMSource.java:689) at jenkins.scm.api.SCMSource.fetchActions(SCMSource.java:691) at jenkins.branch.MultiBranchProject.computeChildren(MultiBranchProject.java:587) at com.cloudbees.hudson.plugins.folder.computed.ComputedFolder.updateChildren(ComputedFolder.java:266) at com.cloudbees.hudson.plugins.folder.computed.FolderComputation.run(FolderComputation.java:162) at jenkins.branch.MultiBranchProject$BranchIndexing.run(MultiBranchProject.java:969) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:415) [Mon Jun 26 11:15:54 CEST 2017] Finished branch indexing. Indexing took 0.16 sec FATAL: Failed to recompute children of ocr-engine com.cloudbees.jenkins.plugins.bitbucket.api.BitbucketRequestException: HTTP request error. Status: 403: Forbidden. {"type": "error", "error": {"message": "To access this repository, enable two-step verification."}} at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRequest(BitbucketCloudApiClient.java:572) at com.cloudbees.jenkins.plugins.bitbucket.client.BitbucketCloudApiClient.getRepository(BitbucketCloudApiClient.java:236) at com.cloudbees.jenkins.plugins.bitbucket.BitbucketSCMSource.retrieveActions(BitbucketSCMSource.java:689) at jenkins.scm.api.SCMSource.fetchActions(SCMSource.java:691) at jenkins.branch.MultiBranchProject.computeChildren(MultiBranchProject.java:587) at com.cloudbees.hudson.plugins.folder.computed.ComputedFolder.updateChildren(ComputedFolder.java:266) at com.cloudbees.hudson.plugins.folder.computed.FolderComputation.run(FolderComputation.java:162) at jenkins.branch.MultiBranchProject$BranchIndexing.run(MultiBranchProject.java:969) at hudson.model.ResourceController.execute(ResourceController.java:97) at hudson.model.Executor.run(Executor.java:415) Finished: FAILURE