403 Forbidden Error on Attachment API using OAuth 1.0

Question

Hello Team,

We are facing 403 Forbidden Error while accessing  Attachment API (mentioned Below) Using OAuth 1.0 from our Connected APP.

API:

https://your-domain.atlassian.net/rest/api/3/attachment/content/{id}

We are able to access this above API from POSTMAN. But from our connected app we are facing 403 forbidden Issue.

Can anyone help us the reason for this issue or if anyone faced same kind of issue earlier please guide us.

Thanks,

Nilimesh

Nilimesh Hait · Answer

Thanks @Jim Knepley - ReleaseTEAM ,

We are able to access the other APIs except Attachment API using OAuth 1.0.

Marc -Devoteam- · Answer

Hi @Nilimesh Hait

Welcome to the community.

As mentioned by @Jim Knepley - ReleaseTEAM oauth 1 is not supported within Atlassian, only oauth 2 is.

Postman uses oauth 2 by default, so this explains why this call succeeds.

Jim Knepley - ReleaseTEAM · Answer

Welcome to the community @Nilimesh Hait

If I read the API documentation (and authentication guidance) correctly, OAuth 1.0 isn't supported and you have to use OAuth 2.0 with the appropriate scopes. That would be consistent with a 403 response, but I can't speak to why Postman works.