Hello Everyone,

I would like to propose that we switch from basic authentication with JIRA
in the merge script and archery to PAT based token authentication.

Basic authentication is deprecated in Jira Cloud [1] and PATs remove the
need to save your password in clear text (e.g. config file), PATS are
easily created [2], PATs can be revoked and an expiry date set. Token
authentication also does not trigger a captcha. The changes needed in
workflow and scripts are minimal and easily outweighed by the advantages.

I have created a PR with the necessary changes [3].

Best,
Jacob

[1]:
https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-basic-auth-and-cookie-based-auth/
[2]:
https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html
[3]: https://github.com/apache/arrow/pull/13283

Reply via email to