Skip to content

docs: mention Bitbucket user read scope needed by auth probe - #6291

Open
thamrx wants to merge 1 commit into
pingdotgg:mainfrom
thamrx:docs/bitbucket-user-read-scope
Open

docs: mention Bitbucket user read scope needed by auth probe#6291
thamrx wants to merge 1 commit into
pingdotgg:mainfrom
thamrx:docs/bitbucket-user-read-scope

Conversation

@thamrx

@thamrx thamrx commented Aug 12, 2026

Copy link
Copy Markdown

Fixes #6290

The Bitbucket auth probe (probeAuth) calls GET /2.0/user, which on scoped Atlassian API tokens requires read:user:bitbucket. A token created with only the currently documented scopes (pull request + repository read/write) works for every actual PR operation but fails the probe with a 403, so Settings → Source Control reports the provider as not authenticated and the toggle stays disabled.

This is a docs-only change (two lines):

  • installHint in BitbucketSourceControlProvider.ts now says "pull request, repository, and user read scopes"
  • docs/user/source-control.md mentions the read:user:bitbucket scope and why it is needed

See the issue for the full 403 response body showing required vs. granted scopes.

🤖 Generated with Claude Code


Note

Low Risk
Docs-only wording change for Bitbucket token scopes; no runtime or auth logic is modified.

Overview
Documents that Bitbucket API tokens need the read:user:bitbucket scope so auth probing can succeed.

Updates the Bitbucket installHint and source-control setup docs to include user read access alongside pull request and repository scopes. Without it, tokens that work for PR operations still fail probeAuth (GET /2.0/user) and leave the provider disabled in settings.

Reviewed by Cursor Bugbot for commit edffe14. Bugbot is set up for automated code reviews on this repo. Configure here.

Note

Document read:user:bitbucket scope requirement for Bitbucket auth probe

Adds read:user:bitbucket (user read) to the list of required API token scopes in both the source-control.md docs and the installHint returned by makeDiscovery in BitbucketSourceControlProvider.ts. This scope is used to verify the Bitbucket connection during the auth probe.

Macroscope summarized edffe14.

The Bitbucket auth probe calls GET /2.0/user, which requires the
read:user:bitbucket scope on scoped Atlassian API tokens. A token
created with only the documented pull request + repository scopes
passes every PR operation but fails the probe with a 403, so
Settings -> Source Control shows the provider as not authenticated.

Mention the extra scope in the install hint and the user docs.

Fixes pingdotgg#6290

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Aug 12, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: c2bc9944-b104-4e56-9c10-c48675257f52

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added vouch:unvouched PR author is not yet trusted in the VOUCHED list. size:XS 0-9 changed lines (additions + deletions). labels Aug 12, 2026
@macroscopeapp

macroscopeapp Bot commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

Approvability

Verdict: Approved edffe14

Documentation-only changes: updates an error message string and markdown docs to mention the additional read:user:bitbucket scope requirement. No runtime behavior impact.

You can customize Macroscope's approvability policy. Learn more.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XS 0-9 changed lines (additions + deletions). vouch:unvouched PR author is not yet trusted in the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bitbucket: documented token scopes fail the auth probe — probeAuth needs read:user:bitbucket

1 participant