nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Plugin public API without JSESSIONID

Kamil Koszarny {Appfire}

Is it possible to implement public API in plugin, which will not require JSESSIONID cookie?

Can I configure atlassian-plugin.xml file so JSESSIONID is not required for some URLs? I assume in Jira code there is a Spring security configuration (e.g. extending WebSecurityConfigurerAdapter) and filter in chain. Normally it would be a place to define that JSESSIONID is not required, by setting SessionCreationPolicy to STATELESS:

<span>protected</span> <span>void</span> <span>configure</span><span>(final HttpSecurity http)</span> <span>throws</span> Exception {
    http
        .sessionManagement()
            .sessionCreationPolicy(SessionCreationPolicy.STATELESS);

(see https://stackoverflow.com/questions/2504590/how-can-i-use-spring-security-without-sessions)

I did not found the answer here: https://developer.atlassian.com/server/framework/atlassian-sdk/servlet-filter-plugin-module/

I can add additional filters in atlassian-plugin.xml, but cannot modify existing.

Maybe you can propose some workaround?

Accepted answers

All comments

There are no accepted answers yet

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

server

jira-core