API response : Auth always respond 200

[bletellier]

Hello,

I'm trying to request Jira's API with v3 (using postman for test)

• create a token with scope for reading project and issues
• test /rest/api/3/search/approximate-count with jql in body

I always have the same result, no import project key.

HTTP 200

{

"count": 0

}

So i tried to update my username and password (token) and the result is still the same, with HTTP 200 status.

Expected result :

When I use a wrong authent, API should respond with 401 Unauthorized status

[Marc - Devoteam]

Hi @bletellier 

What is the API endpoint you are using?

What is the call you are making?

[bletellier]

Hi @Marc - Devoteam 

Endpoint is /rest/api/3/search/approximate-count

Headers:

Authorization: Basic XXXXX

Accept: application/json

Content-type: application/json

Request Body : 

{

"jql": "project = ACI"

}

[Marc - Devoteam]

Hi @bletellier 

First does the user the API token is created on, have browse permission to the project ACI?

The API call will provide a 200 even if the user has no project access, but if it has project admin access, as it can find the project, but no browse permission will prohibit any view of the project, so also no count of the issues in the project.

Are you using a full API token or a scoped API token?

If its a scoped token, are you using the API call:

https://api.atlassian.com/ex/jira/{cloudId}

[bletellier]

I'm using my account, and I have access to this project.

I also tried with an admin account (with a new generated token).

I'm using scoped API token, with scope this scopes : 

Read

read:app-data:jira

read:attachment:jira

read:board-scope:jira-software

read:board-scope.admin:jira-software

read:jira-work

I don't understand your API call api.atlassian.com/ex/jira/{cloudId}

What's this ?