Authenticate to RSS Feed

[colinb]

On the RSS Feed Builder page it talks about an authenticated feed, but it doesn't provide any details on how to authenticate for that feed. We are using Atlassian IDs with two-factor authentication today, eventually moving to federated sign-in with Azure AD. Is there any guidance on how to authenticate from an external feed reader for Atlassian IDs and what will happen when we move to federated auth?

[Josh Santangelo]

I'm also wondering how to access an authenticated RSS feed. My company is using Google SSO. I can use an API key for the password, but I'm not sure what to put in for the username. Since it's an email address, I don't think I can do http://user@host.com:password@company.atlassian.com...

[Dario B]

@Josh Santangelo  your username is your email address. However, the possibility to pass username and password in the URL has been removed since it is not secure.

[Josh Santangelo]

When subscribing at feedbin.com, the only option is to include the login in the URL. If the username is an email address, the @ must be encoded as %40. This seems to work, per the discussion there.

https://github.com/feedbin/feedbin/issues/306

[Dario B]

@Josh Santangelo it depends if we are talking about Confluence Server or Cloud.

The possibility to pass uername and password from the URL has been removed in Cloud since it is a big security risk:

- https://jira.atlassian.com/browse/CONFCLOUD-33816

While the same functionality is still available in Confluence Server for the time being:

- https://jira.atlassian.com/browse/CONFSERVER-33816

[jbatch]

My understanding is that it should work with basic auth using API Tokens. 

email and password will fail for both 2FA and federated login, so you should create a api token at https://id.atlassian.com/manage/api-tokens and use that in the place of your password and that should work :)

Edit: also depending on what RSS feeder you're using you might run into this recently filed bug https://jira.atlassian.com/browse/CONFCLOUD-61458. I don't have any idea when that'll be addressed unfortunately.

[colinb]

With Postman it pushes through the redirect and will return the results. I was unable to get Microsoft Flow to work as the RSS connector does not appear to handle it. Unsure whether it is the redirect in CONFCLOUD-61458 causing the issue or a problem in the RSS connector itself with basic auth URLs.

It would be good if the docs were updated to mention the API token method.