nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Why does API REST say my valid login ID are unauthorized?

Jef Lee

I previously used the API to add comments to JIRA issues from a VB6 IDE add-in. Then it stopped working. Now we need it to work again. I found this suggested cURL command but the response is Unauthorized (401). Here's the command that I call from a batch file:

C:\tools\curl\bin\curl -k -u "MyName:MyPassword" -X POST "https://itvision.atlassian.net/rest/api/3/issue/SYN-11/comment" -H "Content-Type: application.json" --data "This is a test. Please ignore it. Thanks."

The SYN-11 JIRA issue exists.

I directed the command output to a text file. It seems to be HTML that says unauthorized. I was going to attach the file but there's no attach button for a file only link or image. So the file is at the bottom of this detail.

When I redirected the output I got additional output to the command window that said:

 % Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 23395 0 23354 100 41 27410 48 --:--:-- --:--:-- --:--:-- 27426

That doesn't look great. In the window it looked columnar.

So, the MyName:MyPassword are where I have my name and my password to log into the company's Atlassian cloud. I logged out to prove that my name and password worked - they did. So what is wrong when I try the API REST call?

Thanks

Jef.

Output file content below:

<html>
<head>

<title>Unauthorized (401)</title>


<script type="text/javascript" >
var contextPath = '';
var DeferScripts = { deferState: 'disabled' };
</script>
***************
Large section of script cut out from here to make request fit constraints
***************
<div> <script type="text/javascript" crossorigin="anonymous" data-encoding="gzip" src="https://jira-frontend-prod-ap-1.ap-southeast-2.prod.public.atl-paas.net/assets/language-pack.en_UK.b76495a9cf2d362e896b.7.js"></script> </div>
<meta name="application-name" content="JIRA" data-name="jira" data-version="1001.0.0-SNAPSHOT">
</head>
<body id="jira" class="aui-layout aui-style-default page-type-message" data-version="1001.0.0-SNAPSHOT" >
<div class="aui-page-panel"><div class="aui-page-panel-inner">
<section class="aui-page-panel-content">
<header class="aui-page-header"><div class="aui-page-header-inner">
<div class="aui-page-header-main">
<h1>Unauthorized (401)</h1>
</div>
</div></header>
<div class="aui-message aui-message-warning warning">
<p>Encountered a <code>"401 - Unauthorized"</code> error while loading this page.</p>
<p><a href="/secure/MyJiraHome.jspa">Go to Jira home</a></p>
</div>
</section>
</div></div>
</body>
</html>

Accepted answers

Alexey Matveev

Hello,

You need to use the API token instead of the password.

https://confluence.atlassian.com/cloud/api-tokens-938839638.html

All comments

Alexey Matveev

Hello,

You need to use the API token instead of the password.

https://confluence.atlassian.com/cloud/api-tokens-938839638.html

Jef Lee

Thank you Alexey.

I will try to do that.

Jef

Jef Lee

Thank you Alexey, that worked.

As a newcomer, I do not know if I should make this a new question or if it is considered part of this one.

This is the request now:

C:\tools\curl\bin\curl -D- -X POST -H "Authorization: Basic ***Token Here***" -H "Content-Type: application/json" --data "{ \"body\":\"This is a test. Please ignore it. Thanks.\", \"visibility\": { \"type\": \"role\", \"value\": \"Administrators\" } }" https://itvision.atlassian.net/rest/api/2/issue/SYN-11/comment > junk.html

I got this HTML response:

HTTP/2 404 server: AtlassianProxy/1.15.8.1 vary: Accept-Encoding cache-control: no-cache, no-store, no-transform content-type: application/json;charset=UTF-8 strict-transport-security: max-age=315360000; includeSubDomains; preload date: Tue, 25 Jun 2019 05:48:02 GMT atl-traceid: f3b34f4ef25adf9a x-arequestid: bd83bf60-5ed2-4384-89bd-4bbb9367472d x-xss-protection: 1; mode=block timing-allow-origin: * x-content-type-options: nosniff set-cookie: atlassian.xsrf.token=BXK0-SOVR-6UJG-0M24_e8cc2d4ab6f2d93357f0e0ecc279fbbf55851de3_lout; Path=/; Secure {"errorMessages":["Issue does not exist or you do not have permission to see it."],"errors":{}}

The issue exists and I should have access according to my superiors.

Any suggestions...

Alexey Matveev

Use this rest api method to get the user under whom you connected

https://developer.atlassian.com/cloud/jira/platform/rest/v3/?utm_source=%2Fcloud%2Fjira%2Fplatform%2Frest%2F&utm_medium=302#api-rest-api-3-myself-get

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

rest-api

jira-cloud

atlassian-support