[Bugzilla-announce-list] IMPORTANT RPC CHANGES REQUIRED

[Simon Green]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Action required from Red Hat Bugzilla script authors

The software that runs Red Hat Bugzilla on our staging server
(https://partner-bugzilla.redhat.com/) has been updated to a new
release, version 4.4.4019.

Following the upgrade, nearly all RPC calls to this server are
expected to be broken as the release contains a security patch that no
longer supports the use of cookies for authentication.


How does this affect me?

Instead of returning a cookie, the User.login call now returns a token
that clients must pass in the Bugzilla_token parameter to subsequent
RPC calls. If the token is not passed, Bugzilla will treat the RPC
call as unauthenticated and will not allow access to non-public data.

See
https://partner-bugzilla.redhat.com/docs/en/html/api/Bugzilla/WebService.html#LOGGING_IN
for more details.

Client scripts that access Red Hat Bugzilla via XML-RPC or JSON-RPC
and use login cookies for authentication must be updated to instead
remember the token received when logging in and pass that token back
to Bugzilla in subsequent RPC calls.

This change will be made on the live production server (
https://bugzilla.redhat.com/ ) next week (date to be determined). If
you use RPC, you will need to update your scripts once the updated
release is completed. You can use the staging server to test these
changes in the meantime.


Stage server:

XMLRPC -  https://partner-bugzilla.redhat.com/xmlrpc.cgi
JSONRPC -  https://partner-bugzilla.redhat.com/jsonrpc.cgi

Please contact the Bugzilla team at bugzilla-owner at redhat.com if
you have any questions about this change or the latest software release.

- -- 
Regards,

Simon Green
Software Engineer
Red Hat Asia Pacific Pty Ltd
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJTV1lpAAoJEGFoF1bezwI/GPsH/0cJh5k+aglEFniL4YOoGd4n
4mUyLOZZhBaCaMLb8QlTxlKuOMGHFT1wTK84rXd98HQuIEhS+m8GQ2F8++rzDaW0
d+13NwT33R7Qm/OruV9W3dLyt4ho9UHt3UxyulR9DBp8e295nCTxITikXkf5rxsf
3yTAvfrc1+6CtOcJygDgXGSGQss//3JCCpyQqyL5fV6Hxvibmy1Fnly1GeirOtJ4
59fDNNw6m73vVIzS47+Cixc9i6dM3hytk8IrUo2ekkiXn+f1vOMccnauFszXfNoh
NC4i4Hjb/uGk/o/UGDTuNMt5mJZx7+bykgU2KdFrikitizRg9dQhiHJ1PT8/GhE=
=r53V
-----END PGP SIGNATURE-----