We use both Jira Cloud and Jira Server with GitHub. I have already installed the "new" GitHub integration for the Cloud (a while ago), but both the Server and Cloud were previously set up with the "old" DVCS integration.
I recently received two emails from GitHub that the old integrations (both Server and Cloud) have been using access tokens in a deprecated way.
Hello there!
On June 10th, 2020 at 11:55 (UTC) your application (Jira) used an access token (with the User-Agent Apache-HttpClient/4.5.12 (Java/1.8.0_252)) as part of a query parameter to access an endpoint through the GitHub API.
https://api.github.com/repositories/271262640/hooks
Please use the Authorization HTTP header instead as using the `access_token` query parameter is deprecated.
Depending on your API usage, we'll be sending you this email reminder on a monthly basis.
Visit https://developer.github.com/changes/2020-02-10-deprecating-auth-through-query-param for more information about suggested workarounds and removal dates.
Thanks,
The GitHub Team
The above "Jira" identifies the OAuth app in our GitHub for the old DVCS integration in Jira Cloud.
your application (JIRA Service Desk) used an access token (with the User-Agent Java/1.8.0_202)
From the second email, "JIRA Service Desk" identifies the OAuth app in our GitHub for the old DVCS integration in Jira Server.
So: What can I do about this?
- In Jira Cloud, under Settings / Products / DVCS accounts, nothing is listed (presumably following the migration to the new integration). So why is it still being used, and in a deprecated manner?
- In Jira Server, under Settings / Products / DVCS accounts, my GitHub org and its repos are still listed. I can't find that the new integration even exists yet- so should the old one still be in a working / supported state?
- I could just delete one or both OAuth credentials from GitHub. But something recently used them, and I don't want to break stuff.
Jira Server version as at that point a few days ago was 8.4.1, since upgraded to 8.5.5 (as part of Service Desk).
