It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Create API token for a user in Jira Server Locally.

Praveen N L Jul 02, 2018

In My Locally set up Jira server

My Current local URL=http://localhost:8080/secure/Dashboard.jspa

I am accessing Rest API with basic auth by username and password(plain).

(I don't know my API token)

 

In xyz.atlassian.com 

My cloud URL = https://prohance.atlassian.net/secure/Dashboard.jspa

Here I am accessing Rest API with basic auth by username and password(plain).

(Here i know my API token from id.atlassian.com)

I am able to access Rest API by both 

 a. Username and Plain Password

 b. Username and API token

 

As i read Plain Password over basic auth is deprecated. So asking this.

My Question is

1. How to get API token in local Jira Server.

Or

2. What will be the URL in my locally installed Jira Server for going to the page id.atlassian.com given in below image

image.png

 

Appreciate your Quick response.

1 answer

0 votes
Shannon Spaniol Atlassian Team Jul 03, 2018

Hello Praveen,

This page does not exist in Jira Server. In order to authenticate, you can use OAuth, Basic, or Cookie Authentication, depending on what you're doing.

Let me know if you have any questions about that!

Regards,

Shannon

Hassan Saad Sep 26, 2018

the questions are very clear

 

1. How to get API token in local Jira Server. or self-hosted JIRA.

Or

2. What will be the URL in my locally installed Jira Server for going to the page id.atlassian.com given in the above image?

Shannon Spaniol Atlassian Team Oct 02, 2018

Hassan,

It is not possible to generate API tokens in Jira Server.

  1. As mentioned earlier, in order to authenticate, you need to use OAuth, Basic, or Cookie-based authentication, depending on what you're trying to do. I have linked those above if you are not familiar with those methods.
  2. Therefore, there is no URL in your locally installed Jira Server to go to the page above. The page above is for Jira Cloud only.

Let me know if you have any questions.

Regards,

Shannon

Gaj Umapathy Oct 15, 2018

Hi,

Is there any versions of Jira server that is going to allow for API tokens?

Cheers,

Gaj

Shannon Spaniol Atlassian Team Oct 15, 2018

Hi Gaj,

Not in the near future, but I've raised a feature request for this below that you're welcome to vote on and comment with your usage case:

Regards,

Shannon

Like Jonathan Hult likes this
Gaj Umapathy Oct 15, 2018

Thank you Shannon. Is basic auth going to be deprecated on Jira server too or it will only be done once API tokens are available on Jira (and Confluence) servers too? 

Shannon Spaniol Atlassian Team Oct 15, 2018

Gaj,

Which product are you referring to that had basic auth deprecated? The original post was regarding plain passwords being sent over basic authentication, but not basic being deprecated entirely.

At this time it's only possible to generate an API token on our Cloud apps. We do not have plans in our upcoming roadmap to implement the token system in Server. You're welcome to vote on the request above to help show the team that there is an interest in this feature.

I'm not able to speculate on what would happen if this were to occur. However, I do not foresee this happening since basic authentication is still possible in Cloud apps.

If you wish to authenticate Jira Server API, our recommended usage of Basic Authentication is outlined from our developer site.

Regards,

Shannon

Rob Pointer Oct 18, 2018

Wow this seems like a significant oversight :(

This essentially forces the user to 

  1. Introduce significant security risks by having to
    1. Use clear username/passwords
    2. Create a "special system" (dummy) user
  2. Increase cost by reducing integration options and creating specialist integration points
    1. Requiring an "OAuth-compliant web application" <-- i.e. not using Excel or a script 
    2. Writing a fully fledged plugin
  3. Migrating your data and paying for JIRA Server
    1. This feels like a forced option and is in danger of being perceived as manipulation of buying choices by deliberate user frustration
Like # people like this
Gaj Umapathy Oct 18, 2018

@Shannon Spaniol https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-basic-auth-and-cookie-based-auth/ talks about deprecating basic auth in Cloud. I'm on Jira & Confluence server editions. 

Shannon Spaniol Atlassian Team Oct 18, 2018

Hi Gaj,

Thank you for pointing that out to me! I hadn't heard this and I'm not on the developer site nearly enough so I wasn't aware of the changes. I've submitted your concern now via the feature request I sent you earlier.

I created one as well for Confluence just now:

Please also vote on that and comment with your feedback. It will greatly help us.

@Rob Pointer, if you could do the same, by providing your feedback directly on the feature request. The development team will be able to see your feedback right from the feature request and address any concerns with the implementation of such a feature.

Regards,

Shannon

Nicolas Hurion Dec 10, 2018

Hi Shannon,

 

I voted for the two tickets, would it also be possible to create a ticket for bamboo?

I'm using server version of Bamboo, Jira, Bitbucket and Confluence, and having some consistency on the API would be of great help.

Currently only Bitbucket server has the token.

 

Thanks,

Nicolas H.

Shannon Spaniol Atlassian Team Dec 11, 2018

Hi Nicolas,

There's actually already a case for Bamboo; you can vote for it here:

  • BAM-12095 Provide token based access to Bamboos REST API

Thank you for reaching out!

Regards,

Shannon

Suggest an answer

Log in or Sign up to answer
This widget could not be displayed.
This widget could not be displayed.
Community showcase
Published in Jira Software

Early Access: If you use Jenkins and Jira Software Cloud, you need to read this!

The Jira Software Cloud Team has been busy working on a simple, secure, and reliable way to integrate your build and deployment information from Jenkins with Jira Software Cloud. This means you don’t...

279 views 0 8
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you