JS hide auth details

Hello,

When sending auth request e.g retreiving customfield id thats not on the page, i require to perform an ajax request to jira rest api with providing the auth credentials. These credentials can be seen on the client side when viewing page source code.

Is there a method to hise the auth credentials or any ideas?

Many thanks in advance for the help,
Pon

1 answer

This widget could not be displayed.
Micky Caritte Community Champion Dec 15, 2017

Hi,

Instead of sending auth credentials you might want to reuse client's JSESSIONID (cookie) which won't expose people credentials :)

Hope this helps!

Thanks Micky!

I'm sorry, I'm quite new to using sessions (cookies). 

 

Is there an example somewhere i can go off with using cookies to get custom field values? 

 

I really appreciate your help. 

 

Thanks, 

Pon

Micky Caritte Community Champion Dec 18, 2017

After a second thought, you should not need authentication if your script is executed in an authenticated context. User and password from current session will be saved.

If you need to authenticate the AJAX with another user's credentials, you can use Basic Auth with AJAX as explained here: https://zinoui.com/blog/ajax-basic-authentication

That's a good way to "hide" credentials. I guess it's far better than generating a cookie and reusing it as you'll need to pass the credentials to generate a cookie anyway :)

Please note that Basic Auth is reversible and I can't imagine any "truely secure" way of authentication through ajax with no credentials displayed.

Hope this helps!

Suggest an answer

Log in or Sign up to answer
Atlassian Summit 2018

Meet the community IRL

Atlassian Summit is an excellent opportunity for in-person support, training, and networking.

Learn more
Community showcase
Posted Wednesday in New to Jira

Are you planning to trial, or are currently trialling Jira Software? - We want to talk to you!

Hello! I'm Rayen, a product manager at Atlassian. My team and I are working hard to improve the trial experience for Jira Software Cloud. We are interested in   talking to 20 people planning t...

182 views 2 0
Join discussion

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you