request /wiki/rest/api/group return 401 response for the OAuth 2.0 (3LO) for apps

[nemiro_viktor]

Could you help me please? How i can to get the list of groups, if i use the OAuth 2.0 (3LO) for apps authentication?

1. I created the new application.
2. Got the code . I used the GET request: 
   https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id={clientId}&scope=read%3Ame offline_access read%3Aconfluence-content.summary write%3Aconfluence-content read%3Aconfluence-space.summary write%3Aconfluence-space write%3Aconfluence-file read%3Aconfluence-props write%3Aconfluence-props manage%3Aconfluence-configuration read%3Aconfluence-content.all search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=${YOUR_USER_BOUND_VALUE}&response_type=code&prompt=consent
   
3. Then got the access_token used the POST request:
4. Then i got the confluence site id 
5. Then i tried to execute the https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get
6. request, but got the response with 401 code 

PS:
1. The request (https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get) works fine if i use the basic authentication.

2. And Yes. My user has access to the groups

[Dario B · Accepted solution]

Hello @nemiro_viktor ,

Welcome to the Atlassian Community.

As you can see, no OAUTH Scope is documented for the group endpoint. This actually means that the endpoint does not support Oauth 2 (3LO) yet. 

I have just spoken to DEV and I have been told that they are already working to re-write the group endpoints to add the possibility to:

• Create/Delete/Update Group
• Added/Remove members to/From a Group
• Use 3LO auth

You can vote and set yourself as a watcher to below Feature Request so that you will be notified in case of any progress:

• [CONFCLOUD-66317] Missing Group Rest API methods in Confluence

I hope this clarifies.

Cheers,
Dario