Connect App secure bidirectional comm with Jira

[Yatish Madhav]

Hi

We have a Connect App that has Custom Fields only that are populated via REST API from the connect app.

The Connect App 'sits' on a server where the application is only user after users login and out internal API calls are authenticated

My question:

If the Connect App has the client id and secret from the install handshake how can we make secure webhooks (POST calls from Jira) to the Connect App without having to authticate Jira?

Or, better worded, how can we make Jira talk to the Connect App securely, already knowing that the Connect App is installed on that specific Jira instance?

We currently strictly block the POST requests from the webhooks from Jira. We also do not want to "re-authenticate" using any other credentials.

Makes sense?

Thank you

Yatish

[Yatish Madhav]

Ping... I wonder if anyone has been able to do this still? Thank you in advance. Yatish