Uploaded image for project: 'Bitbucket Cloud'
  1. Bitbucket Cloud
  2. BCLOUD-5376

Using a revoked OAuth token results in a 400 Request Line is too large (BB-6711)

    XMLWordPrintable

Details

    Description

      If a user revokes a OAuth token. When the OAuth consumer uses this token after revocation, it'll receive a 400 'Request Line is too large (4221 > 4094)' after half a minute. (used endpoint /user/repositories)

      I would expect the consumer to get a 401 or 403, in a few seconds.

      Reproduce:

      1. OAuth consumer: Request a OAuth token.
      2. OAuth consumer: Test /user/repositories (it should work)
      3. Bitbucket user: Revoke the previous OAuth token
      4. OAuth consumer: Test /user/repositories (it should result in a 401 or 403)

      Attachments

        Activity

          People

            Unassigned Unassigned
            05bb639b10b2 bvdberg
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: