Announcement: Bitbucket Cloud account password usage for Git over HTTPS and API ending March 1, 2022

283 comments

Steven McNeese
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

Just tried to PULL my repository with SourceTree setup to use oAuth.  Created an app password in Bitbucket.org and set my sourcetree authentication to basic with my existing username and app password.  It authenticates in the setup when saving but when i pull I still get the notification that Bitbucket Clouse recently stopped supporting account passwords for Git authentication and recommends app passwords.  I have exited SourceTree and restarted and still get the error.  Any help would be appreciated.

The Dude
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

What a joke. I did not managed to pull repo with sourcetree using new app password. It was working fine from console but not from sourcetree. Anyway installed Fork and works like a charm. 

Ivan Lott March 10, 2022

Hi @David Dansby , following your advice, I talked to my superior, and I decided to do the following, with his approval too, to use a password on my personal computer and a different password on my work computer. So I used the option git remote add auth-origin https://user:password@bitbucket.org/seu/repositorio.git and that way I left it defined on each of the computers so they don't keep asking for the password again at each pull/push.
Anyway, thank you very much for your attention and explanation. I managed to solve the problem as best we could. Have a nice weekend and God bless you.

Like # people like this
Javier Davalos
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

I hate you guys so much, gave me a panic attack and wasted my whole day

maguibel
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

the answer to solve the problem with the password and fail Authentification is on this link,

steps:

delete the passwrd file from the  ..../AppData\Local\Atlassian\SourceTree

https://www.youtube.com/watch?v=ea_IHZ2Pq34

Like # people like this
Steven McNeese
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

Thank you.  That worked!

David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 10, 2022

@Kennedy can you please provide more details so I can try and assist you. Did you update the connected Bitbucket Cloud repository's credentials? username should be the bitbucket username and password should now be the app password

Like Kennedy likes this
David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 10, 2022

@maguibel thank you for helping out!

For reference, we mention this step as part of the Sourcetree community post we link to at the start of this community post. For ease of access you can find that here https://community.atlassian.com/t5/Sourcetree-articles/Bug-Fix-Sourcetree-for-Windows-authentication-error-when/ba-p/1965968

Benjamin Sisson
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

I'm having issues accessing my projects through git. It looks like my SSH key was deleted and i needed to enable pipelines. I did that and added my key in, but it's still not working! I also tried cloning with https and that is failing too! What is going on!

Benjamin Sisson
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

I was able to resolve the issue by migrating my repos to github

Like # people like this
Hein Thu Ya
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 10, 2022

I already created an app password. But I can't push with the app password. why?

wall-e
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022

Totally unwelcome change, I am moving all my repos away. You are out of your mind if you think I am going to generate app passwords for the 5+ different devices I use every week. If my single password falls into wrong hands, I will just reset it. Easy as that. Bah.

Like # people like this
Alvaro S
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022

piece of garbage you just keep breaking stuff let us work in peace

Like # people like this
Alan Casalboni March 11, 2022

Basic authentication (using username:app_password) for accessing bitbucket resources is not working anymore. Please fix it!

Andy Heinzer
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 11, 2022

@立差西 Please do not post any credentials to Community.  I have removed your previous post to this thread because it contained what appeared to be either an password in cleartext.  I recommend that you change your account password and revoke that previous app password for the sake of your own security.

Since it appears you are using SourceTree on a Windows machine, please follow the steps in https://community.atlassian.com/t5/Sourcetree-articles/Bug-Fix-Sourcetree-for-Windows-authentication-error-when/ba-p/1965968

There is a known issue in regards to Windows edition of SourceTree whereby the git credential manager can sometimes can hold onto the previous credentials instead of using the new credentials.  In which case it might be necessary to uninstall sourcetree and then navigate to c:\users\<your user ID>\AppData\Local\Atlassian\Sourcetree and rename/delete the passwd file found there.  At which point you can then reinstall SourceTree and generate a new app password to use instead.

Like # people like this
Jon Mckeever March 11, 2022

We have a bootstrap script, which is build to configure a new server based on the repos it pulls, and set up auto-pull scripts to keep the local versions up to date.  The autopulls have all been adjusted by editting the .git/config in each folder to use the app password, and those work.  Our bootstrap script, however fails to work at all.  We have added the app password to it, but when trying to use this command, instead of downloading the file in question, we get an Atlassian HTML "Something went wrong" page in the place of the file we are trying to download but using the file's name. (in this case base.psm1 is still the name of the file, but its contents are your html stuff)

 

# Download Base Module to start things off (need my modules)
New-Item -ItemType Directory -force "$scriptsRoot\libs" ; # make libs folder
$webClient = New-Object System.Net.WebClient ;
$webClient.Headers.Add(
"Authorization",
"Basic {0}" -f
([System.Convert]::ToBase64String([
System.Text.Encoding]::UTF8.GetBytes(
$bbCredentials
)
))
) ;


$webClient.DownloadFile(
"$bbPath$bbBranch/libs/base.psm1",
"$scriptsRoot\libs\base.psm1"
);

 

 

I assume, the problem is that we are using Authentication "Basic {0}", but I have no idea what should go in there now.  Will this command even work, now that App passwords are required?

Adam Hughes
Contributor
March 11, 2022

This didn't kick-in for us until march 10th.  

I wrote a small guide on how to setup app passwords so IntelliJ can auth without SSH
https://hughesadam87.medium.com/local-development-in-bitbucket-with-app-password-f1e51a5c74f4

Like Tom Soderling likes this
David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 11, 2022

@Hein Thu Ya can you provide more details so I can try and assist you with your issue. What privilege scops did you select for the app password. Are you using your Bitbucket Cloud username as the username during authentication or are you using your email? As noted in the docs and this community post, email address as username is not allowed when using app passwords for authentication. 

Once you provide more details I can hopefully get your issue resolved.

David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 11, 2022

@Jon Mckeever I don't fully understand your issue. However, now when interacting with the Bitbucket Cloud REST API (and Git over HTTPS protocol) Basic authentication is only allowed with app password. Please note, that the username for app password authentication only allow Bitbucket Cloud username as the username. Email address is not allowed for username when authenticating with app password.

Let me know if this is helpful.

David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 11, 2022

@wall-e to be clear, there is no requirement that you have to create a separate app password for each device. You are fully allowed to create just 1 app password and use the same one on all your devices.

From a security standpoint, one of the good things about app passwords is, if someone gets your one app password (that you may use on multiple devices you easily revoke it from your personal settings) without having to go through the steps of resetting your account password and worrying if someone accessed your account with your account password before doing so.

Like Adam Hughes likes this
David Dansby
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
March 11, 2022

@Adam Hughes thank you very much for that very helpful guide for JetBrains IDE users (the same steps should be allowed on most, if not all, JetBrains IDEs).

For clarity, you were one of the "lucky" ones that were a part of the later stage of the %-based rollout :). We don't do full, single rollouts with large changes like this; it allows us to catch any potential issues before they could affect everyone. If you are interested, this is actually a good blog post explaining how we do rollouts for large changes (it's old but still relatively applicable; also note, it's a transcript of the original recorded video during a meetup).

Like Adam Hughes likes this
szajkop
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022

where is the step by step guide for sourcetree?

suddenly everything is broken and not a single useful information just a fkin wall of text everywhere.

can u not make it clear how to migrate to this new bullshit? its just a huge waste of time for the entire community.

where is the guide??

this is not helpful:

remote: Bitbucket Cloud recently stopped supporting account passwords for Git authentication.
remote: See our community post for more details: https://atlassian.community/t5/x/x/ba-p/1948231
remote: App passwords are recommended for most use cases and can be created in your Personal settings:
remote: https://bitbucket.org/account/settings/app-passwords/
fatal: Authentication failed for ***

Sean Beecroft
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022
https://[email@email_domain.com]@bitbucket.org/[workpace]/[repository].git

should say workspace not workpace. 

Like David Dansby likes this
Ruben van Engelenburg
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022

Why did you remove the option of using a username and password? This is a major headache and I'll probably end up moving away from Bitbucket.

Like valerim likes this
立差西
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
March 11, 2022

@Andy Heinzer 

it work for me

thank you very much !!!!

Like David Dansby likes this

Comment

Log in or Sign up to comment
TAGS
AUG Leaders

Atlassian Community Events