nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

I am not able to authenticate /rest/auth/1/session using Personal Access Token.

Jeevitha_jy5uia

Hi Team,

I am not able to authenticate /rest/auth/1/session using Personal Access Token after upgrading JIRA Datacenter to 10.3.2.

Here's the snippet which I have tried ,

curl --location --request POST 'https://jira-dev.cox.com/rest/auth/1/session?Content-Type=application%2Fjson&accept=application%2Fjson' \ --header 'Authorization: Bearer MjAzOTY1MjM4NDUyOtDq3Y/qCrXPiI/A6dSpjrmdbQsE' \ --header 'Cookie: NSC_kjsb-efw.dpy*443=ffffffff0948294545525d5f4f58455e445a4a42378b' \ --data ''

And I am getting following 403- forbidden error :

{

"message": "The request was rejected due to two-step verification being enabled on your instance."

}

I have already followed the steps outlined in the link https://jira.atlassian.com/browse/JRASERVER-78353.

According to the workaround mentioned in the ticket, I am attempting to use a Personal Access Token mentioned above to authenticate the API endpoint, but it’s not working.

Also, we dont want to revert back to legacy login form (pre-10.2 behaviour) by adding the JVM parameter due to security concerns.

Accepted answers

unknown

Hello @Jeevitha

Go to Google.com
Type in "Jira data center rest api The request was rejected due to two-step verification being enabled on your instance"
Click on the 'Google search' button.
From the search results, click on the first result
That is the existing Bug report that was logged for that problem a month ago. It also contains a description of the solution that has already been provided for that problem.

Google is fantastic. You should try it!

All comments

unknown

Hello @Jeevitha

Go to Google.com
Type in "Jira data center rest api The request was rejected due to two-step verification being enabled on your instance"
Click on the 'Google search' button.
From the search results, click on the first result
That is the existing Bug report that was logged for that problem a month ago. It also contains a description of the solution that has already been provided for that problem.

Google is fantastic. You should try it!

Vishal Biyani_2pr07j

@[deleted]

are you referring to this link https://jira.atlassian.com/browse/JRASERVER-78353?

Jeevitha_jy5uia

Hi @[deleted],

Thank you for the suggestion.

I have already followed the steps outlined and checked the link https://jira.atlassian.com/browse/JRASERVER-78353.

According to the workaround mentioned in the ticket, I am attempting to use a Personal Access Token mentioned above to authenticate the API endpoint, but it’s not working.

Could you please assist me with this?

Also, we dont want to revert back to legacy login form (pre-10.2 behaviour) by adding the JVM parameter due to security concerns.

unknown

"I am attempting to use a Personal Access Token

No you're not. You're using a SESSION COOKIE to access the SESSION COOKIE auth endpoint.

I can see it, right there, in your cURL request:

https://jira-dev.cox.com/rest/auth/1/SESSION?
--header 'COOKIE: <blah>'

Also, we don't want to revert back to legacy login form (pre-10.2 behaviour) by adding the JVM parameter due to security concerns.

Well, then you can't have the solution to your particular problem.

This is the same issue as described in this thread a few days ago. Jira 10.2 increased security for Session Cookies. If you want to persist with using them for accessing the REST API, then you must revert to the legacy, non two-step authentication for browser sessions.

I recommend that you liaise with your organization's IT department who can explain it to you in more detail, and also show you how to correctly use Basic Auth with PATs.

unknown

Is that a link to the first result returned from the Google search?

Jeevitha_jy5uia

So the JVM parameter is required to use a cookie based APIs, even if you request the cookie session using PAT.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

jira-data-center

data-center

pat