gitlab-branch-source-plugin icon indicating copy to clipboard operation
gitlab-branch-source-plugin copied to clipboard

Allow System Authentication Through Username/Password

Open JakobGlass opened this issue 3 years ago • 3 comments

What feature do you want to see added?

GitLab plans to completely phase out API tokens / Personal Access Tokens by version 16. Many distributions of GitLab already have all forms of access tokens removed. A way to access GitLab from Jenkins in the system configuration utilizing username / password will be needed, and is currently needed. The current setup for this plugin only allows authentication through the Personal Access Token credential type.

Upstream changes

No response

JakobGlass avatar Jan 03 '23 17:01 JakobGlass

GitLab plans to completely phase out API tokens / Personal Access Tokens by version 16

Is this true? The only information I could find about this states that access tokens must have an expiry date starting with GitLab 16. But there is nothing stopping you setting the expiry date 20 years into the future.

ChristianCiach avatar Mar 08 '23 20:03 ChristianCiach

GitLab plans to completely phase out API tokens / Personal Access Tokens by version 16

Is this true? The only information I could find about this states that access tokens must have an expiry date starting with GitLab 16. But there is nothing stopping you setting the expiry date 20 years into the future.

Apologies, a bit of truth and rumors got mixed up. Previously, around when I made my post, tokens had been removed from FIPS GitLab entirely. See the note about FIPS here.

When speaking with a GitLab representative trying to assist us back then, they implied that tokens may get removed from GitLab all together by version 16.

Thankfully, tokens have been added back to FIPS since then, so I think all my fears of tokens being completely removed are gone, for the time being at least.

JakobGlass avatar Mar 08 '23 20:03 JakobGlass

update: as of GitLab 17 access tokens have a forced expiration date of one year for standard accounts

but unlimited expiration is still available for special "service accounts"

csrichter avatar Jul 22 '24 12:07 csrichter