Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Sudden security warning

Deleted user August 4, 2023

I have been running a basic query for over 2 months for 2 projects on our system. Today the script errored with : Invoke-JiraMethod : For security reasons Jira requires you to log on to the website before continuing.

I can login to Jira and look at latest issues, but script still fails. I believe I have admin access in our group. Need to know how to further investigate this.

2 answers

1 accepted

0 votes
Answer accepted
Carlos Garcia Navarro
Community Champion
August 4, 2023

Hi @[deleted] ,

Welcome to the Community! I wonder if this is related to the deprecation of Basic authentication with passwords and cookie-based authentication as described in this article: https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-basic-auth-and-cookie-based-auth/

 "If you currently rely on a script, integration, or application that makes requests to Jira Cloud with basic or cookie-based authentication, you should update it to use basic authentication with an API token, OAuth, or Atlassian Connect as soon as possible."

Can you update the authentication to using an API token, e.g.? The article includes details on how to do this. Thanks,

0 votes
Deleted user August 5, 2023

Thank you for your reply. I followed the steps and created an API token. In my script I used

$cred = Get-Credential -UserName "myuser@company.com" -Message "My Token"

then pasted in Token for the password. The error is now "The user cannot be authenticated" 

Deleted user August 5, 2023

Maybe to add to the confusion. My access to the company's Jira application is done with ESSO, which does not use email as password but PSID [7 digits] then password. Up until 2 days ago when I started receiving the security alerts the script would request Get-Credentials and I would enter P9999999 + password and all worked. Having requested and been given a token

email + token => unable to authenticate user

P9999999 + token => still gives security alert.

 

Rock and a hard place, maybe?

m bourgon
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
August 14, 2023

@[deleted] what did you wind up doing? I'm having the exact same problem.

Deleted user August 15, 2023

Right now: stalemate,  The issue was brought to the attention of both our Jira Admin and IT security. IT created a user account for me with a separate password - I ended up trying credentails as:

  • username + password
  • email + password
  • username + token
  • email + token
  • IT account email + password they provided
  • IT account email + token

all failing with either security error or unable to authenticate user. Have a webex with all parties later this week to explore the issue. Hopefully can be resolved.

Deleted user August 18, 2023

Maybe the version 2.14.6 - but running an update doesn't change anything.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events