nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Getting 403 Forbidden error while sending GET request using postman

rpsg35

Hi all,

Sending GET request to /rest/api/2/project/{project-id} but keep getting 403 forbidden error with the following message

Basic Authentication Failure - Reason : AUTHENTICATION_DENIED

However the url in browser works and renders the response in proper JSON format.

Kindly Help.

Regards

Accepted answers

All comments

sukkeong

Check the username/passsword used. Perhaps there was a typo.

Additionally, the user used for performing the REST call may not have the correct permissions to the project.

rpsg35

Posting the api link in the browser is showing the result succesful in json format. So my user has permissions, but when i request the url from postman or python at the same endpoint , i will get denied as told in the message above.

sukkeong

External applications will need credentials to be provided unless the project is public access not needing any login. So, you need to set your credential into your app or script. Otherwise, the server will reply with a forbidden access.

https://httpstatuses.com/403

Web clients keep your session alive through cookies so you do not need to repeatedly provide your credentials.

brimar wells

This error indicates that the server has determined that you are not allowed access to the thing you've requested, either on purpose or due to a misconfiguration . It's probably because the site owner has limited access to it and you don't have permission to view it. The vast majority of the time, there's not much you can do to fix things on your (*client) end. There are three common causes for 403 Forbidden error (server side) . Here they are listed from most likely to least likely:

An empty website directory
No index page
Incorrect settings in the .htaccess file
Permission / Ownership error

If authentication credentials were provided in the request, the server considers them insufficient to grant access. The client SHOULD NOT automatically repeat the request with the same credentials. The client MAY repeat the request with new or different credentials. However, a request might be forbidden for reasons unrelated to the credentials.

Rob Fender

so what's the use of the API Token you can create for your account?

I can access the GET /wiki/rest/api/content/{id} without any issues from Postman or from pasting the endpoint URL in the browser use the `Authentication: Basic <myToken>` header.

But making the same request from a react app hosted on localhost fails with HTTP 403.

Why?

qqqqqqqqq

A HTTP 403 error combined with AUTHENTICATION_DENIED likely means that you've exceeded the failed login attempt limit for your account and you need to fill out a captcha. To verify this, check the HTTP response headers. You'll probably see something along the lines of: x-authentication-denied-reason: CAPTCHA_CHALLENGE.

To fill out the captcha, navigate to the Jira login page at https://your-jira-instance/jira/login.jsp and log in with your username and password. If you log in via SSO, you have to bypass the SSO by appending "?auth_fallback" at the end of the URL. After filling out your credentials, you'll be prompted to type the captcha.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud

atl-gruland