Forbidden (403) error using Jira API

Fahad Akhtar
Contributor
February 16, 2021

A 3rd party is getting a ‘Forbidden (403) error when they try to connect to our Jira instance using the Jira API. They receive the following GET request:

curl --request GET \
  --url 'https://subcom-gtsc.atlassian.net/rest/api/3/field' \
  --user 'sales@signius.com:our_token' \
  --header 'Accept: application/json'

This user is set up as a customer and therefore is not using up a license. They did not create an account, but they set up a token. The user requested a new token to see whether the token was the reason they kept getting "Forbidden (403)" error messages when trying to connect to our Jira instance.  Using the new token to connect to the API returned the same error, so they revoked the new token.  Then they thought I may need to clear all tokens in case there was some obscure issue.  So, they revoked all token's MAP had and created a new one.  Using this new token results in the same error.  Therefore, they are claiming this is NOT a token issue.

The user had tried this a month ago and it was working. They even tested this out on their own Jira instance and it worked.

 

What could have caused this on my Jira instance? Do I need to whitelist their IP Address in the Jira API?  

1 answer

1 accepted

0 votes
Answer accepted
marc -Collabello--Phase Locked-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
February 16, 2021

@Fahad AkhtarIf I understand your problem correctly, the issue is caused by the requesting party not being a Jira user.  They are a customer, and have no API access.

That means you need to set them up as a full user account.

Fahad Akhtar
Contributor
February 17, 2021

The user was saying that everything was working fine a month ago. A month ago they still had a customer account. Could it be anything else?

Fahad Akhtar
Contributor
February 18, 2021

@marc -Collabello--Phase Locked- , your suggestion worked. Thank you.

Pradhap K July 24, 2023

@marc -Collabello--Phase Locked- @Fahad Akhtar Hi. I have faced the same issue. How to set the customer as a full user account? 

 

Can you explain the below mentioned?

''They are a customer, and have no API access.

That means you need to set them up as a full user account.''

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
PERMISSIONS LEVEL
Product Admin
TAGS
AUG Leaders

Atlassian Community Events