Home → Suggestions →

Authorise Bitbucket via API keys

• Edit

mustafa.arif

23 Dec, 2014 12:54 PM

Hi there,

I'm wondering if we can authorise Bitbucket repository access *manually* using *multiple* API keys.

My motivation is being able to authorise access to repos owned by specific Bitbucket team accounts. It's no longer possible to login to Bitbucket as a team account so this can only be done manually by copying an API key. Furthermore I'd like to authorise access to multiple team accounts: As a company, we create a team account (with its own plan) in Bitbucket for each of our client projects.

The alternative option is for us to create an "Appveyor" user in Bitbucket that is a member of each team. However, as Bitbucket is licensed based on user accounts, this could, sometimes, mean having to increase our Bitbucket subscription plan for a team..

1. 1 Posted by mustafa.arif on 23 Dec, 2014 01:02 PM

   

   Just by way of further explanation. I see that to authorise access to Kiln repos I have to add a Kiln account name and API key. I'd like that for Bitbucket - with the ability to add multiple account / API key entries to a single AppVeyor account.

   Thanks,
   Mustafa

   • Edit

2. Support Staff 2 Posted by Feodor Fitsner on 23 Dec, 2014 07:15 PM

   

   Just to clarify by "API Keys" you mean SSH keys? If so then it's for accessing repositories only while AppVeyor needs accessing API for querying repo meta-information, fetching appveyor.yml, etc. AFAIK, right now it's either Basic authentication or OAuth.

   In the next release we are going to add "generic" Git/Hg repos where you just type its clone URL username/password/key. Maybe this would work for you though you'll be missing built-in BitBucket webhooks.

   • Edit

3. 3 Posted by mustafa.arif on 24 Dec, 2014 11:35 AM

   

   Nope, I mean an API Key. I think it is only available for team accounts in Bitbucket, not personal accounts. See screenshot attached.

   From what I understand from the documentation, the "API key" is just a password that is used in Basic authentication - but I haven't tried it out.

   • api_key.png 64.4 KB
   • Edit

4. Support Staff 4 Posted by Feodor Fitsner on 24 Dec, 2014 06:54 PM

   

   Wow, I see it. It's on "manage team" page.

   Well, right now we are re-designing SCM authorization part to add new stuff (GitHub Enterprise, Stash, Git and Mercurial) and make it ready for on-premise. On-premise will allow connecting BB, GH and everything else using Basic authentication. I will keep your case in mind - maybe we could have some checkbox enabling Basic auth for hosted AppVeyor too.

   • Edit

5. 5 Posted by mustafa.arif on 29 Dec, 2014 10:32 AM

   

   Thanks for keeping it in mind. I'm keen to avoid managing any on-premise
   infrastructure, which is why we use Bitbucket teams and why I'm attracted
   by AppVeyor as a potential replacement for TeamCity.

   • Edit

6. Support Staff 6 Posted by Feodor Fitsner on 29 Dec, 2014 06:22 PM

   

   Sure!

   • Edit

7. Ilya Finkelshteyn closed this discussion on 25 Aug, 2018 01:52 AM.