[JENKINS-62375] /gitlab-webhook/post token auth

Hello! Thank you very much for this great plugin!

So, I have a question. I really need token auth for jenkins/gitlab-webhook/post requests from gitlab (after push branches, tags, mrs, etc.), otherwise anyone can send webhook to this uri without authentication, I feel this is a security problem.

I know about token authorization feature on uri /project/.* (from gitlab plugin), but this feature is not available on gitlab-branch-source-plugin .

Excuse for troubling.

---
Originally reported by paulstrong, imported from: /gitlab-webhook/post token auth

• assignee: baymac
  
• status: In Progress
  
• priority: Minor
  
• component(s): gitlab-branch-source-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 2
  
• imported: 20251216-182730
  

Raw content of original issue

Hello! Thank you very much for this great plugin!


So, I have a question. I really need token auth for jenkins/gitlab-webhook/post requests from gitlab (after push branches, tags, mrs, etc.), otherwise anyone can send webhook to this uri without authentication, I feel this is a security problem.


I know about token authorization feature on uri /project/.* (from gitlab plugin), but this feature is not available on gitlab-branch-source-plugin .


Excuse for troubling.

• environment: Ubuntu 18.08.3, jenkins 2.222.3, gitlab branch source 1.5.1