Why am I receiving GitHub API deprecation warnings?

David Knoll June 12, 2020

We use both Jira Cloud and Jira Server with GitHub. I have already installed the "new" GitHub integration for the Cloud (a while ago), but both the Server and Cloud were previously set up with the "old" DVCS integration.

I recently received two emails from GitHub that the old integrations (both Server and Cloud) have been using access tokens in a deprecated way.

Hello there!

On June 10th, 2020 at 11:55 (UTC) your application (Jira) used an access token (with the User-Agent Apache-HttpClient/4.5.12 (Java/1.8.0_252)) as part of a query parameter to access an endpoint through the GitHub API.

https://api.github.com/repositories/271262640/hooks

Please use the Authorization HTTP header instead as using the `access_token` query parameter is deprecated.

Depending on your API usage, we'll be sending you this email reminder on a monthly basis.

Visit https://developer.github.com/changes/2020-02-10-deprecating-auth-through-query-param for more information about suggested workarounds and removal dates.

Thanks,
The GitHub Team

The above "Jira" identifies the OAuth app in our GitHub for the old DVCS integration in Jira Cloud.

your application (JIRA Service Desk) used an access token (with the User-Agent Java/1.8.0_202)

From the second email, "JIRA Service Desk" identifies the OAuth app in our GitHub for the old DVCS integration in Jira Server.

So: What can I do about this?

  • In Jira Cloud, under Settings / Products / DVCS accounts, nothing is listed (presumably following the migration to the new integration). So why is it still being used, and in a deprecated manner?
  • In Jira Server, under Settings / Products / DVCS accounts, my GitHub org and its repos are still listed. I can't find that the new integration even exists yet- so should the old one still be in a working / supported state?
  • I could just delete one or both OAuth credentials from GitHub. But something recently used them, and I don't want to break stuff.

Jira Server version as at that point a few days ago was 8.4.1, since upgraded to 8.5.5 (as part of Service Desk).

1 answer

1 accepted

1 vote
Answer accepted
buggy5004 June 30, 2020

I asked the same question but looks like there is an issue: https://jira.atlassian.com/browse/JSWSERVER-20414

Jonas Eriksson October 27, 2020

I couldn't find anything useful there regarding the cloud version

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
VERSION
4.4.1
TAGS
AUG Leaders

Atlassian Community Events