JIRA dashboard through a proxy

Question

Hi,

we brought JIRA and confluence in-house, and things work quite beautifully.

Now I'd like to have a dashboard up on a kiosk, and have an nginx proxy serve up that dashboard to the kiosk. My problem is the authentication; we have created a user that will only be able to view (not edit) certain pages, but I can't figure out how to make nginx authenticate itself against the JIRA instance.

I hope I have explained what I'm trying to achieve well enough? Any pointers would be greatly appreciated.

Cheers,

Andrej

Andrej Ricnik · Answer

Ahoi Pavel,

Shai's approach works fine for basic auth, and I'm using it for several other sites we're showing in kiosks successfully (these are only visible on the internal network and basic auth is deemed good enough).

For JIRA we opted for OAuth, as it's also available to our "road warriors", and the added header doesn't do the trick there.

Thanks for trying.

As for logging into the Kiosk: that would be very cumbersome - the kiosk is driven by a chromebit, attached to the back of a wall-mounted TV. Everytime something changes on the fleet (security patches, new versions) of either the proxy or the JIRA machine would require us to try and get to the chromebit w/ a keyboard.

Kind regards,

Andrej

Pavel V · Answer

Hi Andrej, have you tried proxy_set_header? I found some resources here:

- http://shairosenfeld.blogspot.com.au/2011/03/authorization-header-in-nginx-for.html

- https://developer.atlassian.com/server/jira/platform/security-overview/

I would also consider logging the user in the kiosk browser.