Skip to content

GH-style Jira OAuth endpoints default return 404

Luke Duncalfe requested to merge 362168-apply-end-of-life-amnesty-to-jira-oauth-controller into master

What does this MR do and why?

This MR changes our GitHub-style Jira OAuth endpoints to default return 404.

The endpoints in Oauth::JiraDvcs::AuthorizationsController have been deprecated since 15.1.

Due to uncertainty about the impact of a full removal in 16.0, all endpoints now return 404 by default but we allow customers to toggle a flag to reverse this breaking change.

At the time of writing the flag is enabled for GitLab.com and will be removed closed to 16.0 release to make a breaking change for SaaS customers.

See:

#362168 (comment 1359618964) !118126 (comment 1375655863)

In future, we will make the breaking change irreversible #408148 (closed).

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #362168 (closed)

Merge request reports