Rest Plugin for Jira - authentication

[som roysarkar]

Hi,

I am trying to build a JIRA plugin that will essentially be a REST api that can be called to take some actions like create issues, etc. This is for the Jira server version.

This Rest api will then be called by a backend application with the payload.

My question is do I need to handle any kind of authentication during these api calls?

If so, how is it supposed to be done?

Has anyone here done this before? It would be very helpful if you could point me in the right direction, as I am very new to this.

Thanks in advance!

[Alexey Matveev · Accepted solution]

You do not need to handle authentication. You can find more info here:

https://developer.atlassian.com/server/framework/atlassian-sdk/developing-a-rest-service-plugin/

Read about @AnonymousAllowed annotation.

[som roysarkar]

Thanks a lot Alexey! It makes sense now.

Turns out, I actually need to handle authentication. Any idea on how to do that using basic authentication (username+password) and Oauth. OAuth will be preferable.

[Alexey Matveev]

Do you mean that you need to handle authentication from external applicaton? If so then you can find info here:

https://developer.atlassian.com/server/jira/platform/basic-authentication/

OAUTH here:

https://developer.atlassian.com/server/jira/platform/oauth/

[som roysarkar]

Thanks again! Yeah I meant authenticating while making calls from an external application. Funny thing I was just looking at these pages too.

[Prashant Shrivas]

I have a similar need but with sso cookie.

We are on JIRA server with crowd 2.x configured to enable sso.

plugin consuming rest is getting failed for authentication. it works well for basic authentication.

what do we need to do to make cookie based authentication works for sso ?