nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Getting 401 unauthorized error python after trying everything

Vibhor Malik

Hi All, please help. I tried everything still getting 401 unauthorized error in python. Below is my code.

url = 'https://jira.mycompanyname.org/rest/api/2/issue/XYZ-85'
server = 'https://jira.mycompanyname.org'

headers = {
'Accept':'application/json',
'Content-Type':'application/json',
'Authorization': 'Basic [base64 encoded string of my office email id:auth token]'
}
options = {
'server':sever
}

query = {
'jql':'project=XYZ'
}

response = requests.get(url,headers=headers,params=query)
print(response.text)

Please help. I am exhausted trying every page on this community and you tube videos, nothing is working

PS can this be because our company uses OKTA to login into apps?

however NOTE - when I am opening below URL in my browser its showing all information

'https://jira.mycompanyname.org/rest/api/2/issue/XYZ-85

Many thanks

Accepted answers

All comments

Nic Brough -Adaptavist-

Okta doesn't support basic authentication, you'll need to use Oauth, Andy gives us a good guide to this at https://community.atlassian.com/t5/Jira-questions/JIRA-Rest-api-Access-with-OKTA/qaq-p/1186836

Vibhor Malik

Hi @Nic Brough -Adaptavist- Thanks for the reply.

I checked into this - however the steps to use Oauth need to create an application link in Jira. (here) - however my company doesnt give me access to go to Jira settings, so I cant get past by this step.

Is there any way I can setup or you can help set this up?

If not possible - I only need data from Jira. and I can see that data in lot of text format when I paste this link in browser 'https://jira.mycompanyname.org/rest/api/2/issue/XYZ-85

Is there a way to extract that data from browser by scraping or any other way to python?

Thanks

unknown

Hello @Vibhor Malik

The reason why the GET works in your browser is that it's already passed through the OKTA 2FA sequence when you logged into the Jira web GUI and has a session cookie, so it's pre-authenticated

I'm currently working in an environment that uses OKTA for 2FA login to Jira for their users, but to work around this to access their Jira Cloud REST API without having to enable and use OAuth, I got the company's firewall admins to add a whitelist rule to allow the connection to the REST API over port 43 as an exception. Once that was done, everything was fine and I was able to use the normal Key / Token and bundle it into a Basic auth session over HTTPS.

Most companies are understanding enough to allow these sorts of small, special purpose exception cases to OKTA, provided they know why you're doing it and trust you.

If the company won't allow that sort of OKTA bypass, then they'll have no choice but to enable the application linking for you, and you'll have build the 3LO sequence into your python.

Vibhor Malik

Hi @[deleted]Many thanks for the information. This is really helpful.

One quick question - as I am able to get all info in the browser, is there any way to retain that information? OR I was reading somewhere that we can use JSessionID or session cookie to read info from browser in any tool.

Is there any way I could browser info because I only need to GET info and not POST it and how to do it in python?

Thanks.

Vibhor

unknown

Hello @Vibhor Malik

If you want to keep the JSON output from the REST API that is shown on the browser window, it's just text so you can either copy and paste it into a text file, or use the browser's Save function to keep it. Raw JSON isn't very readable, so it's a good idea to use a browser side add-on that parses the JSON and converts it back to human readable text. Firefox has a built-in JSON parser where Chromium based browsers need an extension.

As for for some other browser side app or tool re-using the same session cookie that was created after logging into Jira, it's not likely; the cookie is unique and specific to that login session only and cannot be used for anything else. Modern web browsers do session sandboxing to stop apps in one window from accessing the cookies of other apps in other windows as a deliberate security feature.

Vibhor Malik

Thanks @[deleted]

However manual copy pasting would be a tedious task as I have to go through issue 1 to issue 2500 till date and counting more in future

so I may have to work on some loop in python and use that info which is displayed in browser. Is there any way we can do this?

As far as reading Json is concerned I am only interested in task close date so I can create a method or RegEx to pick that info from it.

Thanks again

Vibhor

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

cloud

rest-api

api

atl-gruland

python

automation