oauth error - autoscaler runners

Question

ive chosen to use basic auth for my controller, and it works fine. i want to use the same authorization method for the jobs - but it will only allow me to use oauth client id and secret.

even when i create oauth creds - im still met with the same error

[2024-11-15 20:27:00,832] An error occurred whilst updating runner state to "ONLINE". org.springframework.web.reactive.function.client.WebClientResponseException$BadRequest: 400 Bad Request from POST https://auth.atlassian.com/oauth/token at org.springframework.web.reactive.function.client.WebClientResponseException.create(WebClientResponseException.java:217) Suppressed: reactor.core.publisher.FluxOnAssembly$OnAssemblyException: Error has been observed at the following site(s): *__checkpoint ⇢ 400 from POST https://auth.atlassian.com/oauth/token [DefaultWebClient]

Elliott Fallar · Answer

I found the issue - it looks like i inadvertently updated a part of the job template that should not have been. For other that may have been confused by the docs - these lines should NOT be changed: data: oauth_client_id: <%oauth_client_id_base64%> oauth_client_secret: <%oauth_client_secret_base64%>

Elliott Fallar · Answer

Hi Mark!

I am running the controller and cleaner with basic auth, however - i've tried vairous ways to get the jobs to use the same mechanism (basic auth) to no avail. Therefore, they are using app password with repository:read, account:read, runner:write as per https://bitbucket.org/bitbucketpipelines/runners-autoscaler/src/d51f6a8868cfd0127da25287f1409a3a3e635b6c/.

My guess is the callback url is not correct - ive used a variation of atlassian callback endpoints ive found online:
https://bitbucket.org/oauth/callback
https://bitbucket.org/site/oauth2/authorize

to name a few.

Mark C · Answer

Hi @Elliott Fallar,

Welcome to the community.

Could you confirm whether you're using an App password for your basic credentials?

Regards,
Mark C