Create Webhook 1.0 SPI not working for scoped PAT

[Anand Elumalai]

Create Webhook 1.0 API not working for granular scoped PAT and working fine for PAT without scopes.

https://api.atlassian.com/ex/jira/{cloudID}/rest/webhooks/1.0/webhook

{

"code": 401,

"message": "Unauthorized; scope does not match"

}

[Marc -Devoteam-]

Hi @Anand Elumalai 

Based on the Rest API endpoint there is no mention that scoped APiItokens can be used and I think that scoped tokes can't be used here.

"Currently, scopes are not available for all endpoints. If the endpoint you want to use is not listed on the above table, you need to use an API key without scopes to access that endpoint."

See also https://developer.atlassian.com/cloud/admin/scopes/ 

[Anand Elumalai]

Hi @Marc -Devoteam- @Harpreet  Thanks for the update. Could you please confirm below case API usage?

API : https://your-domain.atlassian.net/rest/webhooks/1.0/webhook

Doc : https://developer.atlassian.com/cloud/jira/software/webhooks/

The documentation doesn’t specify the supported authentication types, but since the 1.0 webhook API only works with PATs that have no scopes, we should access this API using an unscoped PAT, correct?

[Marc -Devoteam-]

Hi @Anand Elumalai 

Yes, you need an unscoped PAT.

[Harpreet]

Hello @Anand Elumalai ,

Welcome to the community..!

 Please confirm which article you're following for 'Create Webhook 1.0 API not working for granular scoped PAT'. 

Regards

Harpreet Walia

[Anand Elumalai]

https://developer.atlassian.com/cloud/jira/software/webhooks/