Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements

  • Global
  • Personal

Recognition

  • Give kudos
  • Received
  • Given

Leaderboard

  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

How to Allow users to authorize our app with Oauth 1.0 with any cloud url

winning I'm New Here Nov 27, 2020

We have a requirement to create an integration with Jira where we can create s user, delete a user and a bunch of other things on behalf of a jira cloud admin user.
I have tried Oauth 2.0(3LO) but the create user endpoint returns an error of not being enabled to work with Oauth 2.0. So decided to try out Oauth 1, but on setting up I realize oauth 1.0 is cloud specific, and so for our users to be able to use it the admin has to set up an application link to us.
So wondering if there is another way to accomplish what we want without the hassle of each admin going through the application link setup process

1 answer

0 votes
Dario B Atlassian Team Dec 08, 2020

Hello @winning ,

Welcome to the Atlassian Community!

If I understand correctly you are building an app to manage users in Jira and you would like to know the best way to authenticate it. Is this correct?

If this is correct, then you might want to review the below page:

Security

There are a few basic options for security, depending on what sort of app you are trying to make:

  • Forge apps use OAuth 2.0 when authenticating with Jira. Scopes are an OAuth 2.0 mechanism that limits an app's access to a user's account. The Forge platform also provides managed APIs to make requests on behalf of the user, meaning that third-party code is never trusted with user credentials.
  • Connect apps have HTTPS and JWT authentication built in to secure communication between your app, Jira, and the user. Our Connect toolkits, Atlassian Connect Express (ACE) and Atlassian Connect for Spring Boot, handle most of the security setup for new apps. Note that OAuth 2.0 (3LO) isn't supported for Connect apps.
  • OAuth 2.0 (3LO) apps use OAuth 2.0 (3LO) to pass permissions and data from Jira.
  • Basic auth is supported for making API calls, but is not recommended unless you have other security measures in place.

Read the Security overview for more details.

 

In your case I'd suggest to build a connect app. For further details on this please see: 

 

 

Also, for the future, please notice that this might not be the best place to get help on development related questions. The best resources are the ones listed in https://developer.atlassian.com/resources.

Specifically:

 

I hope this helps.

 

Cheers,
Dario

winning I'm New Here Dec 08, 2020

Thanks for the answer @Dario B ,
I will try out connect app.


cheers,
Winning

Like Dario B likes this
Dario B Atlassian Team Dec 09, 2020

You are very welcome @winning ! :) 

Hopefully everything will go smooth. However, in case of any issue, you might want to ask in the developers community or create a DEVHELP request.

Cheers,
Dario

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
CLOUD
PRODUCT PLAN
STANDARD
TAGS
Community showcase
Published in Marketplace Apps & Integrations

How to log work and track time in Jira when a person is part of multiple teams

  The manager’s daily activities include a list of challenges to reach high levels of efficiency for their teams. Part of these challenges is related to how to deal with the worklog systems sin...

92 views 2 1
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you