How to create bearer token to make jql queries?

[Leandro Cardoso]

I've been recently trying to create a JQL query through postman however I cannot create any bearer token. I can create personal APIs but these doesn't fullfill what we need, basic tokens expire and we need to authenticate our service through a Bearer token. 

There are no clear explanations on how to do this. Does anyone had the step-by-step guide?

[Germán Morales _ Hiera]

Hi @Leandro Cardoso, the confusion is common because there's no UI flow in Atlassian Cloud labeled "create Bearer token". The way to get a real Bearer token in Cloud is through a Service Account.

The personal API tokens you've been creating only support Basic auth against your-site.atlassian.net (Authorization header with base64 of email:token). They cannot be used as Bearer tokens.

For service-to-service authentication that uses a Bearer token, the setup is:

1. Go to admin.atlassian.com, then Directory, then Service accounts, and create a service account.
2. Open the service account and select Create credentials, then API token. Give it a name, set the expiration (1 to 365 days), and pick the OAuth scopes you need. For JQL search you'll need read:jira-work as a minimum.
3. Use the gateway URL https://api.atlassian.com/ex/jira/{cloudId}/rest/api/3/search with header Authorization: Bearer {your-api-token}.

The Cloud ID is the UUID after /s/ in your admin URL. Don't use the Organization ID, that one returns 404.

Official doc with the full flow and a curl example: Manage API tokens for service accounts