Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Restriction API access

yassine delil
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
September 13, 2024

Hello,

For security reasons, we want to restrict API access. Is there an alternative method other then using "authentication API token" in Jira?
Our goal is to block API access for all users except for generic service accounts. Are there other methods available to enforce secure API access?

Best regards,

1 answer

0 votes
Jim Knepley - ReleaseTEAM
Atlassian Partner
September 13, 2024

You can disable Personal Access Tokens by setting the system property "-Datlassian.pats.enabled" to false, but...

The REST API will also accept session cookies for authenticated users, and the Jira web application makes those calls as part of normal operation.

This feels like you'll need to put some sort of API firewall in the mix if you want more granular filtering without breaking the experience for users.

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
VERSION
9.12.12
TAGS
AUG Leaders

Atlassian Community Events