nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Create my own Trusted Application

Alex Obuhovich

I'm trying to create my own application and add it as Trusted Application in Jira via Application Link functionality.

When I use Generic Application type, then none is displayed under Incoming Authentication and Outgoing Authentication columns.

I've tried to set application type to Confluence and then Jira tries to access /admin/appTrustCertificate file, which of course is missing in my application.

Question 1:

How can I generate this appTrustCertificate file?

Question 2:

How to specify username (without knowing a password) in JIRA REST API request when trusted application incoming authentication is used.

Accepted answers

Renjith Pillai

As the webhook is not going to execute on a browser session (am not sure how to correctly word this), I am thinking this might not work. For both trusted/oauth to function, it will be a remote server access initiated while you are in the context of an application open by an user.

In your case, these is a disconnect, as the webhook triggers your script which in turn is accessing JIRA.

I may be completely wrong, but this is what I think.

All comments

Renjith Pillai

Can you get the screenshots of exactly what the problem is?

Alex Obuhovich

The bigger picture is:

commit comes to FishEye
FishEye goes to my script, that is specified as WebHook in FishEye
my script should be able to connect to Jira REST API on behalf of user, who performed a commit
my script then transitions issue based on commit message given by WebHook

Problem is with item #3, because I don't know how to connect to Jira REST API only knowing username, but not a password.

That's why I thought, that "Trused Application" term is right one to allow "my script" issue API calls on behalf of any user.

Renjith Pillai

In your case, these is a disconnect, as the webhook triggers your script which in turn is accessing JIRA.

I may be completely wrong, but this is what I think.

Alex Obuhovich

I've just checked. Smart commit plugin somehow is able to add jira issue comment on behalf of user, who made a commit.

Alex Obuhovich

But what about "Smart Commits" plugin, that for example adds a comment to an issue based on svn commit message?

Does it add a comment from user, who made a commit OR just user, which was used to create an application link?

Alex Obuhovich

I saw following code in "Smart Commits" FishEye plugin:

impersonationService.doAsUser(PluginMetadata.PLUGIN_ID, user.getUserName(), new Operation<Void, RuntimeException>()

Then I suppose it's possible by a plugin, but how api doing that just from REST API call without writing a plugin?

Renjith Pillai

Dmitry,

Did you see this developer docs on making OAuth calls to JIRA? https://developer.atlassian.com/display/JIRADEV/JIRA+REST+API+Example+-+OAuth+authentication

If you can configure in JIRA this and per user get a OAuth approval, you should be able to push that users changes back into JIRA. Am not sure about the life of the token though.

Alex Obuhovich

I'm new to OAuth, mostly used used classes that provided integration, but don't know how the technology works.

So does this work like this:

every user (that can make commits) create a token on his side and give it to me
webhook knows token of each user, who made a commit and uses it to perform REST call to Jira

am I correct?

I saw empty list of active OAuth tokens under Jira user profile, but I didn't see a button to generate one

Alex Obuhovich

Or do I need to creae a different application link to be used with each user, who made a commit?

Renjith Pillai

Not really. When the user accesses the site, he will be prompted to authorize, (it's termed OAuth dance), the application receives a token which can be retained to perform actions on behalf of the user. That's the same concept for facebook login also - http://developers.facebook.com/docs/concepts/login/

May be you should try to read the tutorial a couple of times - https://developer.atlassian.com/display/JIRADEV/JIRA+REST+API+Example+-+OAuth+authentication and try to use the client sample code in your web app.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

application-link