Application Link Issue! Please HELP !!!!

[Farhad]

Dear All

I have Jira and Confluence behind nginx as reverse proxy.

but when i want create application link between them i face with attachment error !

i know this error related to my reverse proxy!

my nginx config is :

server {
listen 80;
server_name _;
return 301 https://IP-ADDRESS;
}

server {
listen 443 ssl;
server_name _;
disable_symlinks off;
ssl_session_cache shared:SSL:50m;
ssl on;
ssl_certificate /home/tefas/crt/30f0eee4d557965f1db60af2ab44f381.pem;
ssl_certificate_key /home/tefas/crt/30f0eee4d557965f1db60af2ab44f381.pem;
proxy_redirect off;
proxy_buffering off;

location /jira/ {
proxy_pass http://10.35.32.63:8081/jira/;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Authorization "";
client_max_body_size 250M;
}

location /confluence/ {
proxy_pass http://10.35.32.64:8090/confluence/;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
client_max_body_size 250M;
proxy_set_header Authorization "";
}

1. what wrong with this config ?? (my jira and confluence are both working fine behind reverse proxy this issue only for application link between them)

[Rilwan Ahmed]

Dear @Farhad ,

1. Delete existing application links in both Jira and Confluence (Some times it takes time to reflect the changes after you hit the delete, so wait for atleast 10 minutes).
2. Create application link from Jira to confluence OR confluence to Jira. 
3. If issue still exists, check for Application link version matrix and make sure your Jira and Confluence versions are compatible
4. You can also refer to Application links troubleshooting article for more details. 

[Farhad]

@Rilwan Ahmed 

thanks for your respond.

i recreate application link and check both atlassian troubleshooting link but my problem still persist !!

this issue related to my reverse proxy that not create access token from jira to confluence and confluence to jira !! i added jira in confluence allow list and confluence to jira allow list and everything is fine! but i think reverse proxy doesn't allow call_back oauth request.

[Rilwan Ahmed]

Hi @Farhad ,

You need to create application link from Admin settings --> Applications --> Application link
Direct url: https://<jirabaseURL>/jira/plugins/servlet/applinks/listApplicationLinks

[Farhad]

@Rilwan Ahmed 

i cant use https://reverse-proxy-ip/jira in application link !! i faced with can't connect to url error !! ( jira base url is reverse proxy ip / jira ) 

i only use internal jira ip with connector port and /jira context in application link , then application link API says : convert this url to reverse proxy , everything work fine , but when link is created i face with network error and after click on error i face with authentication faild , OAuth signature invalid !!! 

[Rilwan Ahmed]

Hi @Farhad ,

1. Ensure the Base URL is correct for two applications.
2. Check this article for the solution
   https://confluence.atlassian.com/kb/oauth-error-oauth_problem-signature_invalid-720406720.html
3. Please go through each links in Application links troubleshooting and see for resolutions. 

Also get in touch with your network team to see if the systems are in same network and has any connectivity issue. 

Please share the application link configuration page screenshot from both the applications here. 

[Farhad]

@Rilwan Ahmed 

Dear Rilwan , i check and read all atlassian article for my problem !

jira and confluence base url both correct and i access to them by reverse proxy address 

Jira : https://reverse-proxy-ip/jira

confluence : https://reverse-proxy-ip/confluence 

but for application link when i use above url , i faced with url not accessible !!

i must used internal jira (confluence) ip address with connector port for connection establish. but after that in application link status i face with network error that say possible your server behind misconfigured reverse proxy!! (my nginx reverse proxy config has been available in post 1) and when i want access to jira frrom confluence i face with error OAuth Authentication failed !! (attachment picture 1 ) , i think this issue related to my reverse proxy config !! 

[Stefan Stadler]

Hi Farhad,

I can confirm that accessing Jira or Confluence behind a reverse proxy is working quite good for application linking. That is what we do as well. And we can configure the reverse proxy IP directly to be used in the application link page. It think the problem is that the reverse proxy is not setup correctly and using the application link without the reverse proxy is causing this to be HTTP instead of HTTPS. Not sure if this is supported at all, but never checked.

Furthermore, I suspect your Jira and Confluence being setup using the reverse proxy URL as the base URL. That means you are trying to do the application linking with a different URL (direct URL with port) compared to the base URL, which WILL lead to issues.

I also had issues with the application linking when both instances were using self signed SSL certificates and did not add them to the truststore. 

It might help to think about checking this page for setting the certificate up correctly:

Connecting to SSL services | Administering Jira applications Data Center 9.16 | Atlassian Documentation

That way, you can use the reverse proxy as it is intended.

Hope this helps!

Stefan