Need user-context authentication for anonymous users to respect permission

[Mohamed Amine Haouas]

I'm working with the atlassian-connect-spring-boot framework and running into an issue with how anonymous users are handled when making api requests to confluence

right now, for anonymous users (no account ID), we use authenticatedAsAddon(), which uses app-level permissions

When we fetch using the v2 REST API like (/api/v2/spaces/) for example, app-level authentication returns all spaces the app can access, not just the spaces that anonymous users have permission to view

This forces us to manually check permissions for each space afterward, which adds extra API calls and latency

We need a way to make API requests with user-context authentication for anonymous users so that API results are already filtered 

Is there a supported way to make user-context requests for anonymous users?

[Marc -Devoteam- · Accepted solution]

Hi @Mohamed Amine Haouas 

Welcome to the community.

Based on the available API endpoints that could serve this, you have endpoints:

• /wiki/rest/api/space/{spaceKey}
•  /wiki/rest/api/space/{spaceId}/permissions

But I don't think they can server your purpose.

You should better revert your question to the developer community, see; https://community.developer.atlassian.com/ 

[Mohamed Amine Haouas]

Thanks a lot @Marc -Devoteam- 

[Marc -Devoteam-]

Hi @Mohamed Amine Haouas 

Please accept my answer as a solution, if my answer helped to solve or provide a workaround to your request.

This will help other community member trying to solve the same or provide them with a work around

P.S. If the answer is very valuable to you, please share some kudos.