Assistance with XSRF security token

[Said Elgourbi]

Hi everyone,

I’m working on automating the download of certain reports from Jira Cloud and could use some guidance on handling session tokens.

We’ve written a Python script that opens the download link in a browser. The issue we’re facing is that the link includes an atl_token parameter, which appears to change with each new web session. Here's an example of the link format:

https://ourJiraLink&atl_token=2563232326565698989856565323232656598

Right now, we have to manually extract the new token from the HTML source each time, or the download fails.

We’ve tried using a Jira API token for authentication, but it didn’t help—likely because these links aren’t exposed through the REST API.

Is there a recommended way to either:

• Use a persistent session token for this type of access, or

• Access the same reports via the REST API in a more reliable way?

Appreciate any advice or direction from those who’ve tackled similar issues.

[marc -Collabello--Phase Locked-]

You might try an RPA framework, which would allow you to log into Jira with your browser to obtain a new token.

[Said Elgourbi]

that would make it way too complicated.

I created a chrome extension that fetch the token, the user will have to copy it into the script. 

if anyone has any other easier solution, please share it with us. 

Thanks