User can't authenticate Jira with Bitbucket, Confluence, or Bamboo

[Liam Jones]

When we first set up our stack (Jira, Bitbucket, Bamboo, Confluence) I had to do a lot of work to get the Application links to work because of the reverse proxy. I settled for exposing another port on the local network that each access directly. This worked fine and the apps could authenticate with each other, and users could link their accounts (I really didn't want to lose sleep getting SSO working).

Now however when new users attempt to link their accounts this happens:

with the following error text:

Technical details

Log's referral number: 558419c1-52fd-49b0-b9e8-fc31f0b56f71

Cause

Referer URL: AURL/plugins/servlet/oauth/authorize?oauth_callback=http%3A%2F%2Fjira.companynamehere.com%2Fplugins%2Fservlet%2Fapplinks%2Foauth%2Flogin-dance%2Faccess%3FapplicationLinkID%3D9aebe144-e024-3930-9194-60f3959e9ad8%26redirectUrl%3Dhttp%253A%252F%252Fjira.companynamehere.com%252Fplugins%252Fservlet%252Fstreams%252Fapplinks%252Foauth%252Fcompletion%253FapplinkId%253D9aebe144-e024-3930-9194-60f3959e9ad8&oauth_token=PgIK5Ze1IytA8M92YBgbBNm4kMmgQBtF

java.lang.IllegalArgumentException: Request url 'http://bitbucket.companynamehere.com' isn't in the same origin as the rpc url 'http://bitbucket:8185'

java.lang.IllegalArgumentException: Request url 'http://bitbucket.companynamehere.com' isn't in the same origin as the rpc url 'http://bitbucket:8185'
	at com.google.common.base.Preconditions.checkArgument(Preconditions.java:145) [guava-18.0.jar:?]
	at com.atlassian.applinks.core.auth.ApplicationLinkRequestFactoryFactoryImpl$AbsoluteURLRequestFactory.createRequest(ApplicationLinkRequestFactoryFactoryImpl.java:172) [?:?]
	at com.atlassian.streams.internal.applinks.ApplicationLinkServiceExtensionsImpl.isAuthorised(ApplicationLinkServiceExtensionsImpl.java:44) [?:?]
	at com.atlassian.streams.internal.applinks.OAuthCompletionServlet.doGet(OAuthCompletionServlet.java:79) [?:?]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:622) [servlet-api.jar:?]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729) [servlet-api.jar:?]
	at com.atlassian.plugin.servlet.DelegatingPluginServlet.service(DelegatingPluginServlet.java:37) [atlassian-plugins-servlet-4.5.0.jar:?]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729) [servlet-api.jar:?]
	at com.atlassian.plugin.servlet.ServletModuleContainerServlet.service(ServletModuleContainerServlet.java:45) [atlassian-plugins-servlet-4.5.0.jar:?]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:729) [servlet-api.jar:?]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:230) [catalina.jar:8.5.6]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165) [catalina.jar:8.5.6]
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) [tomcat-websocket.jar:8.5.6]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192) [catalina.jar:8.5.6]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165) [catalina.jar:8.5.6]
	at com.atlassian.jira.web.filters.JiraLastFilter.lambda$doFilter$0(JiraLastFilter.java:39) [classes/:?]
	at com.atlassian.jira.web.filters.steps.ChainedFilterStepRunner.doFilter(ChainedFilterStepRunner.java:74) [classes/:?]
	at com.atlassian.jira.web.filters.JiraLastFilter.doFilter(JiraLastFilter.java:36) [classes/:?]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192) [catalina.jar:8.5.6]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165) [catalina.jar:8.5.6]
	at com.atlassian.core.filters.HeaderSanitisingFilter.doFilter(HeaderSanitisingFilter.java:37) [atlassian-core-5.0.8.jar:?]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:192) [catalina.jar:8.5.6]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:165) [catalina.jar:8.5.6]
	at com.atlassian.plugin.servlet.filter.IteratingFilterChain.doFilter(IteratingFilterChain.java:39) [atlassian-plugins-servlet-4.5.0.jar:?]
	at com.atlassian.plugin.servlet.filter.DelegatingPluginFilter$1.doFilter(DelegatingPluginFilter.java:58) [atlassian-plugins-servlet-4.5.0.jar:?]
	at com.atlassian.jira.tzdetect.IncludeResourcesFilter.doFilter(IncludeResourcesFilter.java:77) [?:?]

I'm at a bit of a loss as to what to do. None of the articles on here are helpful for this issue, and I don't think I've updated recently.

I've attempted to remake the the application links that doesn't seem to make any difference. It looks like the Authorisation link doesn't care about the application URL at all.

Any guidance would be greatly appreciated.