All API do not support OAuth 2.0?

[Johann Zhu]

We are using Jira DC v10.3.12.

Although it claims supporting OAuth 2.0, all of its listed APIs in this page (https://developer.atlassian.com/server/jira/platform/rest/v10003/api-group-issue/#api-api-2-issue-issueidorkey-get) has special note "Forge and OAuth2 apps cannot access this REST resource".

This confused me a lot, if all API cannot be accessed via OAuth 2.0, what is the point of having OAuth 2.0? Or am I looking at the false doc?

[Marc -Devoteam- · Accepted solution]

Hi @Johann Zhu and @mr john 

You are looking incorrectly at the documentation.

3rd party or self developed apps build using Atlassian Forge platform or apps build within internal OAuth2 authentication can't use this API endpoint.

With a user and an OAuth this can be used.

[mr john]

I’m a bit confused here. Jira DC v10.3.12 officially supports OAuth 2.0, but most REST API endpoints note that “Forge and OAuth2 apps cannot access this REST resource”. This makes OAuth 2.0 feel very limited in practice. Is it mainly intended for specific endpoints or other types of integrations outside the standard REST API? The documentation could use some clarification on this.