Skip to content

Applying batch changes to a Bitbucket Server instance incorrectly uses the site credential

Created by: LawnGnome

In 3.27, we refactored changeset source creation to decouple it from the repo package. Unfortunately, a logic error in the refactored BitbucketServerSource implementation caused an authenticator injected after source creation with WithAuthenticator to fail to set the authenticator used for future requests by that source, which meant that user credentials were incorrectly applied. In practice, this means two things:

  1. User actions will be taken as the wrong user, and
  2. Sites that are configured to push via SSH will never have an authenticator that can provide a SSH key, since site configuration doesn't allow for SSH configuration to be encoded within it.