nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Unable to access rest api

Rakesh15

Our organization has created a wrapper (my assumption because JIRA UI is complete different from Atlassian) for Jira and hosted in cloud. We use our company's provided smart card to login to that jira account and I have admin access. This is oauth authencation which is turn it's generating JSESSIONID. I can use this JSessionId to access the rest api in postman.

Now how can I have my own rest api which can make a call to jira rest api and fetch issue details.

I tried cookie based authencation it failed since it's on cloud. However i got to know that we can generate an api token in settings security. However as I mentioned our organization jira UI doesn't have that option under settings security.

If I have to use OAUTH, I cannot generate access token as we need to insert smart card and that ja not possible to interprete a request and create access token by entering smart card into reader.

I tried other links suggested in jira. However I could not achieve it.

Please be so kind to give a clear details on how can I achieve this. Sorry for such a lengthy question. Tried to give all information.

Accepted answers

All comments

Phill Fox

Hi @Rakesh15

Would it be possible for you to attach a screenshot to your question (obfuscating any company sensitive information) so that we can try and recognise which version of Jira your company is using.
In particular it would be useful to see if the URL contains xxxx.atlassian.net and what the "About Jira" screen shows when you click on the help icon (?).

If your site is hosted at xxxx.atlassian.net then you can setup your security token by following the instructions at https://confluence.atlassian.com/cloud/api-tokens-938839638.html

Rakesh15

Hi @Phill Fox

No the URL does not contain xxxx.atlassian.net. It looks like https://gojira.OrganizationName.cloud/jira

Please find attached the 'About Jira' screenshot. For support, this community link has been mentioned.

Rakesh15

Hi @Phill Fox ,

URL looks like -- https://gojira.companyname.cloud/jira

JIRA Version in 'About Jira' -- Jira v8.5.4

Please let me know if you need any further information

Phill Fox

Thanks @Rakesh15 so this tells us that you are using an on-premise version of Jira and it is a relatively recent one at version 8.5.4 (current version is 8.8.1) and the UI will be different between this and the Cloud versions that you are probably comparing with.

So going back to your problem of how do you authenticate against this instance of Jira as it is protected by a SSO using your company smart card.

The first thing to do is to talk to your administrators to find which App they have installed to manage the SSO with the company smart card as each has different approaches to how to handle system accounts such as the one you are trying to setup for your direct access to the REST API.

You will find the names of some examples with this search https://marketplace.atlassian.com/search?product=jira&query=SSO

Once you know which App is in use you can then research the specifics for that App.

Sorry I cannot be of much more help without knowing the exact configuration of your solution.

Phill

Ed Letifov _TechTime - New Zealand_

Our product EasySSO for Jira is one of the SSO apps for Jira Server/Data Center, and we do somewhat compete with the apps from Resolution. For other customers, we have successfully addressed requirements like 2FA with smart cards, where 2FA is done by a reverse proxy fronting the application and the authentication (including for REST requests) is passed to Jira via our HTTP Headers authenticator.

I want to echo what @Christian Reichert (resolution) said - you are unlikely to solve this without a paid app from a 3rd party vendor.

However, I want to add another sentiment.

Apologies for being blunt, but it seems the is a LOT of misunderstandings or misconceptions on what is what in your setup and what is actually possible. At least this is how it comes out on our end. Also there is a security aspect to it - to me, the manipulations involving JSESSIONID cookies as you've described, sound very insecure in nature. Considering you are from an organisation that uses smart cards to protect services, have you actually had your Security Team look this over?

If you *really* want to solve this problem - consider involving a Solution Architect from your side, or at least someone from that support team you've mentioned AND a security team member AND getting an Atlassian Solution Partner into the room. What you are after is definitely possible, you'd be surprised how fast this can be solved if you get the right people involved and ask the right questions.

Rakesh15

Hi @Ed Letifov _TechTime - New Zealand_

Thank you very much for your honest response.

I will check with my support team on this and will confirm if we all can connect once over the phone if that works from your side.

Ed Letifov _TechTime - New Zealand_

Certainly. We (TechTime) are an Atlassian Gold Solution Partner in New Zealand. Feel free to reach to our support via the webchat on our website.

Rakesh15

@Ed Letifov _TechTime - New Zealand_

Sure. Thank you so very much.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

jira-cloud