1010 Access denied on plugin panel

Dzmitry Karayedau
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
January 14, 2022

Hi
Plugin is working for all customers. One customer experience issue that Jira is not able to access to our plugin. We checked roles and all initial setup configuration for customer it's fine.

Also we run our plugin on test instance with same jira version which is 8.9.1 and didn't face any issue.

For Customer it was working fine BUT when they upgraded Jira SD to 4.9.1 the issue appear.

Access denied 1010 it's how customer see plugin panel. We assumed that something wrong with cloudflare setup. They whitelist and checked what could didn't help.

In our access log we have 403 when jira trying to access plugin

I'm attaching customer parts of plugin logs where you could see something.  

I have following parts  in logs which you might read better

from ACCESS.LOG here I see clearly 401 on plugin token. Issue in token?

"POST /rest/webResources/1.0/resources HTTP/1.1" 401 19737 484 "https://jira-staging.atlassian.cfdata.org/plugins/servlet/cloudflareaccess/auth/error.vm?reason=Invalid+token%2C+unable+to+parse%2Fverify.+Please+logout+and+try+again+or+proceed+with+your+Atlassian+credentials." "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36" "-"

FROM JIRA-ATLASSIAN.LOG issue in Cloudflare?

http-nio-8080-exec-131 url: /rest/api/2/issue/1018827; user: _svc_shipboard ERROR _svc_shipboard 1058x132630376x11 18teln5 2400:cb00:36:1121::ac46:905,127.0.0.1 /rest/api/2/issue/1018827 [c.k.r.sil.impl.AbstractSimpleLanguageService] Exception while executing SIL program >>SIL Script CF-21016<<: [SIL Error on line: 23, column: 9] Field >><< cannot be matched against a standard field, a custom field or an alias. What is it?
com.keplerrominfo.sil.lang.SILInfoException: [SIL Error on line: 23, column: 9] Field >><< cannot be matched against a standard field, a custom field or an alias. What is it?
at com.keplerrominfo.sil.lang.SILUtils.error(SILUtils.java:184)

http-nio-8080-exec-52 url: /secure/QuickCreateIssue.jspa; user: laurie WARN laurie 1058x132629105x14 f6vi2v 127.0.0.1 /secure/QuickCreateIssue.jspa [c.o.j.g.jql.relations.RelationsOfMatchingQuery] Error in scripted function: subtasksOf, see below, Field 'labels' does not exist or this field cannot be viewed by anonymous users., The value 'SHIP' does not exist for the field 'project'.. Clause: {issueFunction in subtasksOf(project = SHIP AND labels in (CloudflareTeams))}

http-nio-8080-exec-128 url: /plugins/servlet/gadgets/makeRequest; user: alvin ERROR alvin 1058x132629379x9 lr9cen 136.25.9.193,127.0.0.1 /plugins/servlet/gadgets/makeRequest [o.a.c.c.C.[Catalina].[localhost].[/]] Unhandled exception occurred whilst decorating page
java.lang.NullPointerException

Please help to establish the root cause of it. For me It's clearly that something with cloudflare/security. 

 

0 answers

Suggest an answer

Log in or Sign up to answer