Skip to content

Validate token scopes in bulk_import service

Carla Drago requested to merge 375057-only-validate-above-15-5 into master

What does this MR do and why?

This change implements a token validation when creating the bulk_import service. We now validate the personal access token to ensure the 'api' scope is present if the import's source instance is GitLab version 15.5 or higher. Otherwise we skip the validation as the required endpoint will not be available on the source instance.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #375057 (closed)

Merge request reports