Looking for the full list of http headers

CC April 13, 2014

Dear Jira users

I am facing the "Creating Project Throws 'Error creating project, XSRF check failed'" problem
I am in this case : "Some of the JIRA headers are blocked. For example, X-AREQUESTID, X-ASESSIONID, X-AUSERNAME, X-SITEMESH-OFF, X-Atlassian-Token request headers are blocked in the network configuration"

We are using a third party software to filter incoming request from internet.
I want to find the full list of headers to update the configuration of this application.

I wasn't able to find it in the documentation.
Does someone know where to find it ?

Christophe

Updated : added the third party software

4 answers

1 accepted

2 votes
Answer accepted
CC April 30, 2014

I have opened an now closed issue with the support to confirm the list of headers.
so this list is

  • X-AREQUESTID
  • X-ASESSIONID
  • X-AUSERNAME
  • X-SITEMESH-OFF
  • X-Atlassian-Token
  • X-Requested-With

Do not forget to allow GET (of course), POST (of course) but also PUT http methods

Sergey Svishchev
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
June 30, 2014

also X-Seraph-LoginReason

1 vote
Timothy
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
April 13, 2014
CC April 13, 2014

My Tomcat 7 work fine.
I am able to create project, search for issues...
I am no able to do so through our "internet filter"
I need to give it a whitelist of httpo headers

Like demond61 likes this
0 votes
CC April 30, 2014

I have opened and now closed issue with the support to confirm the list of headers.
so this list is

  • X-AREQUESTID
  • X-ASESSIONID
  • X-AUSERNAME
  • X-SITEMESH-OFF
  • X-Atlassian-Token
  • X-Requested-With

Do not forget to allow GET (of course), POST (of course) but also PUT http methods

0 votes
CC April 21, 2014

You neeed to whitelist some header.
You need also to allow PUT method

Suggest an answer

Log in or Sign up to answer