Assistance with XSRF security token

Question

Hi everyone,

I’m working on automating the download of certain reports from Jira Cloud and could use some guidance on handling session tokens.

We’ve written a Python script that opens the download link in a browser. The issue we’re facing is that the link includes an atl_token parameter, which appears to change with each new web session. Here's an example of the link format:

https://ourJiraLink&atl_token=2563232326565698989856565323232656598

Right now, we have to manually extract the new token from the HTML source each time, or the download fails.

We’ve tried using a Jira API token for authentication, but it didn’t help—likely because these links aren’t exposed through the REST API.

Is there a recommended way to either:

* Use a persistent session token for this type of access, or

* Access the same reports via the REST API in a more reliable way?

Appreciate any advice or direction from those who’ve tackled similar issues.

Said Elgourbi · Answer

that would make it way too complicated.

I created a chrome extension that fetch the token, the user will have to copy it into the script.

if anyone has any other easier solution, please share it with us.

Thanks

marc -Collabello--Phase Locked- · Answer

You might try an RPA framework, which would allow you to log into Jira with your browser to obtain a new token.