• Type: Bug
• Resolution: Unresolved
• Priority: Major
• Component/s: atlassian-bitbucket-server-integration-plugin
• Labels:

  • triaged
• Environment:

  Jenkins 2.492.1
  Bitbucket Server Integration Plugin 4.1.4
  Bitbucket Server v7.21.6

1. 

   Screenshot 2025-03-04 150425.png

   6 kB

   2025-03-04 19:28

2. 

   Screenshot 2025-03-04 150326.png

   8 kB

   2025-03-04 19:31

3. 

   Screenshot 2025-03-04 150953.png

   60 kB

   2025-03-04 19:34

[JENKINS-75365] Build Now action in Bitbucket couldn't be initiated

Collapse comment: Austin added a comment - 2025-03-05 13:28

Austin added a comment - 3 days ago

The build now button seems to only work for freestyle jobs. In my case, I am trying to build a multibranch pipeline job.

I believe it is because of the following code in src/main/java/com/atlassian/bitbucket/jenkins/internal/applink/oauth/serviceprovider/rest/OauthCrumbExclusion.java:

List<String> getBuilds() {
    return Jenkins.get().getAllItems(Project.class).stream().map(project -> "/" + project.getUrl() + "build").collect(Collectors.toList());    } 

This only returns a list of build URL's for freestyle projects because of Project.class

org.jenkinsci.plugins.workflow.job.WorkflowJob.class however will work for other types of projects.

Therefore, since my multibranch pipeline build URL is not in this list, the URL doesn't get a CSRF protection exemption like it should.

Expand comment: Austin added a comment - 2025-03-05 13:28

Austin added a comment - 3 days ago The build now button seems to only work for freestyle jobs. In my case, I am trying to build a multibranch pipeline job. I believe it is because of the following code in src/main/java/com/atlassian/bitbucket/jenkins/internal/applink/oauth/serviceprovider/rest/OauthCrumbExclusion.java: List< String > getBuilds() { return Jenkins.get().getAllItems(Project.class).stream().map(project -> "/" + project.getUrl() + "build" ).collect(Collectors.toList()); } This only returns a list of build URL's for freestyle projects because of Project.class org.jenkinsci.plugins.workflow.job.WorkflowJob.class however will work for other types of projects. Therefore, since my multibranch pipeline build URL is not in this list, the URL doesn't get a CSRF protection exemption like it should.

Collapse comment: Austin added a comment - 2025-03-06 18:50, Edited by Austin - 2025-03-06 18:51

Austin added a comment - 2 days ago - edited

I tested this change locally, and it seemed to fix my issue. I just changed Project.class to Job.class, and updated the relevant import statement.

List<String> getBuilds(){
    return Jenkins.get().getAllItems(Job.class)
           .stream().map(project -> "/" + project.getUrl() + "build")
           .collect(Collectors.toList());
} 

Expand comment: Austin added a comment - 2025-03-06 18:50, Edited by Austin - 2025-03-06 18:51

Austin added a comment - 2 days ago - edited I tested this change locally, and it seemed to fix my issue. I just changed Project.class to Job.class, and updated the relevant import statement. List< String > getBuilds(){ return Jenkins.get().getAllItems(Job.class) .stream().map(project -> "/" + project.getUrl() + "build" ) .collect(Collectors.toList()); }