"Too many invalid password attempts" via curl/wget

[Jason DeLeon]

I have seen this question posed numerous times, however each time this has been in the context of Sourcetree or Git.

We have an older codebase that we've been working to get modern-ish tooling up and running. Part of this tooling is a CI-like system that will do a Bitbucket API hit to check the current commit point, and if there's a difference, pulls an updated copy of code via HTTPS in order to perform a build.

All of this is being done on a Linux 'build' box, however this box has some restrictions on it:

* We need this box to only have read-only access to our codebase

* This has to be command-line only

* We don't have access to the command-line git client, and obtaining access is a bit of a pain due to some locked-down pieces by a third-party MSP

To do this, I've simply been using curl and wget, both with application-specific credentials that only have read-only access to our repositories. The workflow is as follows:

* Ping the Bitbucket API via curl, once every hour or so, to pull the latest commit point for a branch we're interested in testing. We keep track of the previous commit point, so if it ever changes 

* Have wget fetch a copy of the repository, at https://bitbucket.org/<user>/<repo>/get/<branch>.zip

The curl to the Bitbucket API has no issues. However, when attempting to wget I'm receiving an error: "Too many invalid password attempts. Log in at https://id.atlassian.com/ to restore access."

Following these instructions (logging in using my non-app-specific credentials) does indeed correct the issue, but only for a brief period of time. The problem that I have is that this fixes the issue on my schedule, and not the schedule of other working team members; I need a solution to this that works at any given time.