Details
-
Bug
-
Resolution: Timed out
-
Medium
Description
Almost a year ago Marcus Bertrand (A Bitbucket employee) reached out to me, and I'm sure to other 3rd party developers, and strongly suggested that I move to OAuth authentication over basic as that was going away. Great. Unfortunately, because HTTP GET a repository avatars requires authentication, and because "OAuth is not supported for this endpoint" (the response from the Bitbucket API) it makes getting the avatar impossible. The only way you could access the avatar is with BASIC authentication.
Please, for the love of god, make token authentication uniform across your platform. It makes no sense to have some only available from BASIC and suggest to your users that you switch to OAuth.