Can Bitbucket use a custom Authenticator?

[Brad Leary]

We currently have JIRA and Confluence instances configured to leverage our authentication library.  We're doing this with a custom authenticator in the seraph-config.xml file.

We're now looking into Bitbucket and trying to determine if the same is possible.  While trying to research this, I did find one post saying that Bitbucket doesn't use a seraph-config.xml file.  Can anyone confirm that's true, and if there is another option for implementing custom authentication?

[Michael Heemskerk · Accepted solution]

That is correct; Bitbucket Server does not use Seraph for it's authentication stack. Instead Bitbucket has a plugin module type that you can use to hook into the authentication process without modifying any of the configuration files of. You can find the documentation here: https://developer.atlassian.com/bitbucket/server/docs/latest/reference/plugin-module-types/http-authentication-handler.html

and a basic example here: https://bitbucket.org/mheemskerk/stash-auth-plugin-example/src/4e6189b3eeddf814a4147a8c3888a1cdd10bb7ac/src/main/java/com/atlassian/bitbucket/auth/example/RemoteUserAuthenticationHandler.java?at=master

Cheers,

Michael