[FIXED JENKINS-13600] API token authentication was broken in 1.461.

changelog.html

@@ -63,6 +63,9 @@ Upcoming changes</a>
 <div id="rc" style="display:none;"><!--=BEGIN=-->
 <h3><a name=v1.462>What's new in 1.462</a> <!--=DATE=--></h3>
 <ul class=image>
+  <li class=bug>
+    API token authentication was broken in 1.461
+    (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13600">issue 13600</a>)
   <li class=rfe>
     Added the filter textbox to the update center selector.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13476">issue 13476</a>)

core/src/main/java/hudson/security/ACL.java

@@ -130,7 +130,7 @@ public abstract class ACL {
      */
     public static SecurityContext impersonate(Authentication auth) {
         SecurityContext old = SecurityContextHolder.getContext();
-        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(ACL.SYSTEM));
+        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(auth));
         return old;
     }
 }