Bitbucket does not support implicit authentication
Open
area: extensions/backends/bitbucket
type: bug
- Dominant language
- JavaScript
- Stars
- 19.4k
- Forks
- 3.1k
- Avg merge
- 1d 14h
- Merged PRs (30d)
- 9
Description
**Describe the bug**
The Decap CMS guide describes connectivity with Bitbucket using implicit grant.
https://decapcms.org/docs/bitbucket-backend/
On February 27, 2026, Bitbucket stopped allowing implicit grant because it is insecure.
https://community.developer.atlassian.com/t/deprecation-notice-oauth-1-0-and-implicit-grant-flows-for-bitbucket-cloud/97520
So I think we should either be guided towards a setup for Bitbucket using a supported authentication method, or Bitbucket should be removed from the application.
Contributor guide
Assessment
This issue has not been assessed yet.