nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oauth consumer App action using rest api are showing user instead of app

Hidayat Ullah

Hi,

I've developed an Oauth consumer app and when I installed the app on my workspace and do oauth2.0 to get the access_token and perform any action like approve pull request or comments on pull request using rest api the actions are performed but it shows the name of the account user who installed the app I want to perform action based on the App itself such as when a comment is added it should not show user name as the commentator rather it should show the app name.

Is it possible ? if yes can you please refer me to the documentation which i need to follow to achieve the above scenario.

Thanks

Accepted answers

All comments

marc -Collabello--Phase Locked-

Hi @Hidayat Ullah ,

It is possible to do that, i.e. do things as an app. However you'd need to build the app differently. Documentation is here: https://developer.atlassian.com/cloud/bitbucket/integrating-with-bitbucket-cloud/ . For example, you can build an app using the "Connect" framework.

Hidayat Ullah

@marc -Collabello--Phase Locked-

Thanks for you response I'm already using the app descriptor and have the addon created in bitbucekt and using the header jwt but still when the rest api post comment it show the name of the user who install the app it does not show the app name.

I've manually created app at https://bitbucket.org/account/apps and then I'm calling

https://bitbucket.org/site/oauth2/access_token

to get the access token using jwt created with app secret and than using that access_token return from above url to post comment or approve pr etc... but it does not perform actions based on app.

Can you please help in this regard if anything is missing?

marc -Collabello--Phase Locked-

A connect app is different from an OAuth app.

As soon as you get and use the OAuth access token, your app acts as an OAuth app, impersonating a user.

I'd recommend to start with a pure connect app, and then copy over your application code, but not the authentication code.

For a connect app, you can use ACE: https://bitbucket.org/atlassian/atlassian-connect-express/src/master/

Hidayat Ullah

@marc -Collabello--Phase Locked-

How can i call the rest api without access token using connect app?

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

cloud

bitbucket

bitbucket-cloud