I spoke too soon :(
Frustratingly, Gerrit 2.15.14 exacerbated an existing bug[0] to the
extent that I feel like we have no choice but to rollback to 2.15.13.
I have re-disabled HTTP token auth for the time being.
Apologies for the false hope,
-- Tyler
[0]. <https://phabricator.wikimedia.org/T224448>
On 19-06-24 15:53:25, Tyler Cipriani wrote:
Hi all!
tl;dr: Gerrit HTTP token auth has been re-enabled. To use it you'll need to
generate a token via your preferences page[0].
Gerrit HTTP token auth was disabled in mid-march due to concerns about its
implementation[1].
Thanks to the work of Paladox and Gerrit upstream in Gerrit 2.15.14[2] we've
re-enabled HTTP token authentication.
I previously removed all HTTP auth tokens, so in order to use HTTP token auth
you'll need to generate a fresh token via your preference page[0]
Your Lowly Gerrit Fiddler,
-- Tyler
[0]. <https://gerrit.wikimedia.org/r/#/settings/http-password>
[1]. <https://phabricator.wikimedia.org/T218750>
[2]. <https://www.gerritcodereview.com/2.15.html#21514>