Do not send a request via the service account API

[Varvara K_]

I created a service account and created credentials for it in the form of an API token. I'm testing it using Postman (https://api.atlassian.com/ex/jira/{cloudid}/rest/api/3/project/PROF). In the authorization settings, I specify the service account email and token. But I get an error. Although I checked using the Rights Assistant, the service account has rights for this project.

[Tomislav Tobijas]

Hmm, following this 👀

What I only managed to find are these:

• 401 Unauthorized error when service account accesses Jira or Confluence API 
• JRACLOUD-96121: Allow Service Accounts to Create Non-Scoped API Tokens in Jira Cloud 

But they do not say much about that issue you're experiencing.

As you're using Postman, have you tried passing the token as a Bearer token in the authorization header?
I usually mix between the two (Basic and Bearer) when using Postman 😅

Cheers,
Tobi

[Evgenii]

Agree. According to documentation, Bearer token must be used. Basic type isn't used here.

[Sunny Ape]

Bearer token must be used. Basic type isn't used here

Yep!

[Varvara K_]

Ask, I have always used Basic, in order to use Bearer I need to transmit data in this format:
Bearer <Uncoded token>?

[Varvara K_]

@Evgenii @Sunny Ape I use for auth Api token, maybe i must to use OAuth 2.0?

[Evgenii]

You can use OAuth 2.0, but this path will be more painful.
I tried request with API Token - it's working. I assume, you have 401 error. It can be due to wrong or missing scopes.
Here is example of Postman with request, made with API token,

[Varvara K_]

I just don’t know what to do anymore, since I’ve already given out all possible rights.

[Varvara K_]

@Evgenii Bearer doesn`t work. I have a error. After I got a Api token I insert it

[Evgenii]

Try GET request to 
https://api.atlassian.com/ex/jira/{cloudId}/rest/api/3/myself

It's basic request, which can help to understand, is your service account/token working or not. It must return JSON array with data about your service account.

[Varvara K_]

which scopes your Api token have?