Hi @Subramanian, KM (SUBBU)
The GitHub for Jira app employs the industry-standard OAuth 2.0 protocol for secure authentication, leveraging GitHub Apps for granular permission management. Unlike personal access tokens, GitHub Apps provide a more secure and controlled approach. During integration, an access token is generated, but it's managed exclusively by the app, ensuring users don't have direct access.
The GitHub App requests specific permissions, approved during installation, which are typically more limited and secure than broad personal access token permissions.
Additionally, the integration features robust security measures, including webhook signature verification and TLS encryption for all communications. Setup involves creating a GitHub App within your organization and connecting it to Jira, ensuring a secure token-based authentication process.
The access tokens are securely managed by the app, inaccessible to Jira administrators or users. Overall, the GitHub for Jira app's integration prioritizes security and best practices, utilizing OAuth 2.0 and GitHub Apps for a reliable and manageable connection.
To learn more
Integrate Jira with GitHub | Atlassian Support
Connect GitHub Cloud to Jira | Atlassian Support
Hope this helps - Happy to help further!!
Thank you very much and have a great one!
Warm regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.