Unknown webhook type

[nkhitrov]

Sometimes my app getting this json on webhook receiver:

{"accountId":"557058:96xxxxxxxxxxxxxxxxf94","username":"removed"}

It has not any event type field or something else.

I found info about this user in cloud of my company. But. Our domain - ccsteam.ru (Europe/Moscow), his - atlassian.com (Asia/Kuala_Lumpur). How it can be?

{ "self": "https://ccsteam.atlassian.net/rest/api/3/user?accountId=557058:96xxxxxxxxxxxxxxf94", "accountId": "557058:96xxxxxxxxxxxxxxxf94", "accountType": "atlassian", "emailAddress": "xxxxxx@atlassian.com", "avatarUrls": { "48x48": "https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net/557058:96xxxxxxxxxxxxxxf94/d46ad667-c92a-4188-8e1b-4c02a9ce8882/128?size=48&s=48", "24x24": "https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net/557058:96xxxxxxxxxxxxxx94/d46ad667-c92a-4188-8e1b-4c02a9ce8882/128?size=24&s=24", "16x16": "https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net/557058:96xxxxxxxxxxxxf94/d46ad667-c92a-4188-8e1b-4c02a9ce8882/128?size=16&s=16", "32x32": "https://avatar-management--avatars.us-west-2.prod.public.atl-paas.net/557058:96xxxxxxxxxxxxxxf94/d46ad667-c92a-4188-8e1b-4c02a9ce8882/128?size=32&s=32" }, "displayName": "XXXXXX", "active": false, "timeZone": "Asia/Kuala_Lumpur", "locale": "en_US" }

[Dario B · Accepted solution]

Hi @nkhitrov ,

I am removing the sensitive information from your  post.

Once this has been said, that user is actually an Atlassian Support engineer and I can see that he was handling a Support Request for your instance some time ago (end of April circa). This information is also present in the provided JSON:

"accountType": "atlassian"

I have just checked, and currently the user is neither in your instance User Management nor in Jira. I can also see that the last time the user was present in the instance was at the same time the support  request has been closed.  

In the provided JSON payload the user is indeed marked as inactive, however it should not be returned at all:

"active": false

Can you kindly let us know when is the last time you received the JSON payload you pasted?

Cheers,
Dario

[nkhitrov]

Hi @Dario B ,

Thank you for answer.

I checked logs and found last webhook with date 2019-07-25 12:01:09.715 

[Dario B]

Hi @nkhitrov ,

It can be the case that the Support Engineer is still set as reporter/assignee/participant to some issue in your Jira instance and  that would explain why the username is returned as 'removed' (after  a support ticket is closed the user is automatically removed from the instance but some data is left in order not to create inconsistencies in case some data is still under the name of the removed user).

However, since this needs further investigation, I have created  the below support request on your behalf:

- https://getsupport.atlassian.com/servicedesk/customer/portal/23/JST-496521

Please follow-up with the support ticket in order to have this issue addressed.

Cheers,
Dario