Bug: Update file in repo via curl & private token stopped working with latest release.

Summary

Update file in repo via curl & private token stopped working with latest release.

Steps to reproduce

Run Curl PUT command with private token in header.

curl -s -X POST --header PRIVATE-TOKEN: **** --header Content-Type: application/json https://gitlab.com/api/v4/projects/*******%2F*****/repository/commits -d {"branch":"dev","commit_message":"[ci-skip] Automatic VERSION update by Jenkins pipeline","actions":[{"action":"update","file_path":"file_name","content":"1234"}]}

API token is valid and working for other calls.

What is the current bug behavior?

File is not updated with new content.

What is the expected correct behavior?

Update file and commit it with commit message.

Relevant logs and/or screenshots

No error logs retruened by curl for this one.

Output of checks

File is not updated.

Possible fixes

Release which might have caused the issue:

https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/ Section: "Improper Enforcement of Token Scope"

Edited Nov 30, 2018 by Amol Bhatia
Assignee Loading
Time tracking Loading