How to authenticate successfully to the Jira REST API

[Tridev]

Hi Team,

I am not able to figure out the below query, help me out on this.

But base64 is just an encoding format, not encryption. Anyone who intercepts a request using Basic Authentication can decode the Base64 string to retrieve the email and password.

So my question would be if this way of calling the REST API is accepted by Security, taking into consideration that I use https as protocol which does encrypt the whole message?

How is e.g. the NDL fetching the data from Jira through the REST API? Are they also using basic authentication? And if not - could you tell me how they are doing it so I could do the same?

Regards,
Tridev

[Tuncay Senturk]

Hi @Tridev 

Welcome to the Community!

Basic Authentication over HTTPS is generally accepted as secure because HTTPS encrypts the entire communication. So, there shouldn't be anyone intercepting a request and decode.

However, for added security, it’s worth exploring OAuth or other token-based methods. As for NDL or other similar tools, they might be using OAuth or personal access tokens to securely access Jira Data Center’s API.