nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

What's the best way to require login on every page?

David Yu

I'm interested in securing paths in our Jira & Confluence installations so that there are no anonymously available URLs that will load.

This means all unauthenticated requests will redirect to the login page.

I don't know if any special considerations will need to be given for TrustedApps.

I poked around Jira and seems there's an actions.xml file where I can specify role-required in several areas. There also seems to be a way to do it via Seraph, and use seraph-paths.xml to define it.

Accepted answers

Alex Johnson

Hey there, I found your question while looking for similar myself.
I believe this may be what we are looking for.
https://jira.atlassian.com/browse/JRASERVER-65521

All comments

Joe Pitt

Do you mean if someone just types a url to an issue or report it will open without being logged on? Unless you've set permissions to 'anyone' that won't happen.

David Yu

I mean I wish to guard pages which are open to anonymous users. For example, look at all the Jiras in the wild. I know it's not exposing internal information, but it's still data I don't want exposed to anonymous users.

https://www.google.com/search?q="AboutPage.jspa"

Alex Johnson

Hey there, I found your question while looking for similar myself.
I believe this may be what we are looking for.
https://jira.atlassian.com/browse/JRASERVER-65521

David Yu

Good find! I'll have to give it a try. I'll need to double-check all the path patterns it protects.

Still looking for similar option with Confluence.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

jira

jira-service-desk