nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

AuthenticatedRequestFactory with BasicAuth

Christof Hurst_ip4rqw

Hi,

actually we are using Jira Server and Confluence Server. To create page structures in Confluence from Jira tickets, we have a script running in a postfunction. That uses the primary link which is actually Confluence Server.

The following example works:

import com.atlassian.applinks.api.ApplicationLink
import com.atlassian.applinks.api.ApplicationLinkService
import com.atlassian.applinks.api.application.confluence.ConfluenceApplicationType
import com.atlassian.sal.api.component.ComponentLocator
import com.atlassian.sal.api.net.Request

def applicationLinkService = ComponentLocator.getComponent(ApplicationLinkService.class)
ApplicationLink primaryConfluenceLink = applicationLinkService.getPrimaryApplicationLink(ConfluenceApplicationType.class)

def authenticatedRequestFactory = primaryConfluenceLink.createImpersonatingAuthenticatedRequestFactory()

// weiter gehen würde es z.B. mit 
def request = authenticatedRequestFactory
	.createRequest(Request.MethodType.GET, "rest/api/user?username=<USERNAME>")
	.addHeader("Content-Type", "application/json")
String xml_result = request.execute()

When switching to Cloud with Confluence then Confluence Cloud will also be primary link but we can't use the createImpersonatingAuthenticatedRequestFactory() method anymore.

Instead we have to use createAuthenticatedRequestFactory() with a BasicAuth AuthenticationProvider (https://docs.atlassian.com/applinks-api/3.2/com/atlassian/applinks/api/auth/AuthenticationProvider.html)
Actually I have no glue how to do this. Can anybody help with that?

I know there are other methods like UrlConnection or similar. But I want to use this classes.

Thanks for your suggestions.

Christof

Accepted answers

Christof Hurst_ip4rqw

Simply works with handing over an AuthenticationProvider:

import com.atlassian.applinks.api.ApplicationLink
import com.atlassian.applinks.api.ApplicationLinkService
import com.atlassian.applinks.api.application.confluence.ConfluenceApplicationType
import com.atlassian.sal.api.component.ComponentLocator
import com.atlassian.sal.api.net.Request
import com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider

def applicationLinkService = ComponentLocator.getComponent(ApplicationLinkService.class)
ApplicationLink primaryConfluenceLink = applicationLinkService.getPrimaryApplicationLink(ConfluenceApplicationType.class)

def authenticatedRequestFactory = primaryConfluenceLink.createAuthenticatedRequestFactory(OAuthAuthenticationProvider.class)

// call once in case the user has not confirmed yet, c&p the url to browser and confirm
// authenticatedRequestFactory.authorisationURI

def request = authenticatedRequestFactory
.createRequest(Request.MethodType.GET, "rest/api/user/current")
.addHeader("Content-Type", "application/json")
request.execute()

All comments

Christof Hurst_ip4rqw

Simply works with handing over an AuthenticationProvider:

import com.atlassian.applinks.api.ApplicationLink
import com.atlassian.applinks.api.ApplicationLinkService
import com.atlassian.applinks.api.application.confluence.ConfluenceApplicationType
import com.atlassian.sal.api.component.ComponentLocator
import com.atlassian.sal.api.net.Request
import com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider

def applicationLinkService = ComponentLocator.getComponent(ApplicationLinkService.class)
ApplicationLink primaryConfluenceLink = applicationLinkService.getPrimaryApplicationLink(ConfluenceApplicationType.class)

def authenticatedRequestFactory = primaryConfluenceLink.createAuthenticatedRequestFactory(OAuthAuthenticationProvider.class)

// call once in case the user has not confirmed yet, c&p the url to browser and confirm
// authenticatedRequestFactory.authorisationURI

def request = authenticatedRequestFactory
.createRequest(Request.MethodType.GET, "rest/api/user/current")
.addHeader("Content-Type", "application/json")
request.execute()

Dinesh Dinnu

Hello Christof,

When I try to use the same code which you posted above, I am getting the following exception. I am admin on both confluence and Jira. I have no issues using createImpersonatingAuthenticatedRequestFactory(), but we cannot use that anymore in our organization. Is this something to with the commented code or how do I pass the credentials? Please help me.

// authenticatedRequestFactory.authorisationURI

Message:

com.atlassian.applinks.api.CredentialsRequiredException: You do not have an authorized access token for the remote resource.

Stack:

com.atlassian.applinks.oauth.auth.ThreeLeggedOAuthRequestFactoryImpl.retrieveConsumerToken(ThreeLeggedOAuthRequestFactoryImpl.java:91)
com.atlassian.applinks.oauth.auth.ThreeLeggedOAuthRequestFactoryImpl.createRequest(ThreeLeggedOAuthRequestFactoryImpl.java:84)
com.atlassian.applinks.core.auth.ApplicationLinkRequestFactoryFactoryImpl$AbsoluteURLRequestFactory.createRequest(ApplicationLinkRequestFactoryFactoryImpl.java:193)
com.atlassian.applinks.core.auth.ApplicationLinkAnalyticsRequestFactory.createRequest(ApplicationLinkAnalyticsRequestFactory.java:30)
com.atlassian.applinks.api.ApplicationLinkRequestFactory$createRequest.call(Unknown Source)
org.codehaus.groovy.runtime.callsite.CallSiteArray.defaultCall(CallSiteArray.java:47)
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:115)
org.codehaus.groovy.runtime.callsite.AbstractCallSite.call(AbstractCallSite.java:135)
script_068216c11fa5b7dbb7f47c3b598cfa9a.run(script_068216c11fa5b7dbb7f47c3b598cfa9a.groovy:75)

Christof Hurst

Hi Dinesh,

you must once uncomment the line and return the authorization url in console. Make sure to do this (also) with the user who runs script later.

Then copy and paste the url in a browser and click "Allow" or similar.

After that the script should run.

Dinesh Dinnu

Hi Christof,

Your response is working perfectly fine, but I am not the system administrator in our production instance. I will have to tell this procedure to our admin for production deployment. So is there a way to provide user name and password token in the AuthHeader something like httpBasicAuthHeader(username, password token) in your code.


def request = authenticatedRequestFactory
.createRequest(Request.MethodType.GET, "rest/api/user/current")
.addHeader("Content-Type", "application/json")
request.execute()

Your help would be greatly appreciated.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

jira-software

application-link

jira-software-server

confluence-cloud