403 Forbidden Error on Attachment API using OAuth 1.0

[Nilimesh Hait]

Hello Team,

We are facing 403 Forbidden Error while accessing  Attachment API (mentioned Below) Using OAuth 1.0 from our Connected APP.

API:

https://your-domain.atlassian.net/rest/api/3/attachment/content/{id}

We are able to access this above API from POSTMAN. But from our connected app we are facing 403 forbidden Issue.

Can anyone help us the reason for this issue or if anyone faced same kind of issue earlier please guide us. 

Thanks,

Nilimesh

[Marc - Devoteam]

Hi @Nilimesh Hait 

Welcome to the community.

As mentioned by @Jim Knepley - ReleaseTEAM oauth 1 is not supported within Atlassian, only oauth 2 is.

Postman uses oauth 2 by default, so this explains why this call succeeds.

[Jim Knepley - ReleaseTEAM]

Welcome to the community @Nilimesh Hait 

If I read the API documentation (and authentication guidance) correctly, OAuth 1.0 isn't supported and you have to use OAuth 2.0 with the appropriate scopes. That would be consistent with a 403 response, but I can't speak to why Postman works.

[Nilimesh Hait]

Thanks @Jim Knepley - ReleaseTEAM ,

We are able to access the other APIs except Attachment API using OAuth 1.0.