Basic authentication for REST API discontinued?

[Greg Macdonald]

I got a notification in Jira the other day saying that using basic auth for REST API in Atlassian products (particularly Jira) was being discontinued in June 2019 (like, now) and we had to switch to a more secure auth method.

The notification is no longer in my list in Jira and I cannot find any references to this.

Anybody know what is going on? Do I really need to re-code our app integration before the end of the month?

[Andy Heinzer · Accepted solution]

Hi Greg,

The notification of deprecation can be found at this more permanent link as well https://confluence.atlassian.com/cloud/deprecation-of-basic-authentication-with-passwords-for-jira-and-confluence-apis-972355348.html

Atlassian has deprecated the use of cookies and passwords in the basic authentication method for REST.   That said, you can still use the basic method, but going forward, with Atlassian Cloud you will need to create an API Token to use that auth method.

I'm not sure if your app integration was using either a password or a cookie based method of authenticating, but if it was, that integration won't be able to authenticate.

I hope this helps. 

Andy

[Greg Macdonald]

Thanks, Andrew.