Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-14129

Enabling the XSRF in Bamboo cause the integration with JIRA 6.1.5 to break

    XMLWordPrintable

Details

    Description

      Steps to reproduce:

      1. install JIRA 6.1.5
      2. install Bamboo 5.3. Make sure the "Enable XSRF protection" is enabled via Bamboo Admin > Security > Security Settings >
      3. integrate JIRA with Bamboo using Oauth authentication OR Basic Access OR Trusted Application
      4. in the JIRA UI, it will shows that JIRA can't connect to Bamboo as per screenshot Error1.png. However, after disabling the XSRF in Bamboo, it will works immediately and show some build of empty build as per shown in ExpectedBehaviour.png
        In JIRA logs:
        2013-12-17 21:26:02,588 http-bio-9615-exec-15 WARN admin 1286x511x1 n79bat 127.0.0.1 /secure/ViewBambooPanelContent.jspa [ext.bamboo.web.ViewBambooPanelContent] Unable to to connect to Bamboo server. Nothing will be shown.
        com.atlassian.sal.api.net.ResponseStatusException: Unexpected response received. Status code: 500
        	at com.atlassian.applinks.core.auth.ApplicationLinksStringReturningResponseHandler.handle(ApplicationLinksStringReturningResponseHandler.java:19)
        	at com.atlassian.applinks.core.auth.ApplicationLinksStringReturningResponseHandler.handle(ApplicationLinksStringReturningResponseHandler.java:13)
        	at com.atlassian.applinks.core.auth.oauth.OAuthApplinksReturningResponseHandler.handle(OAuthApplinksReturningResponseHandler.java:51)
        

      In Bamboo log:

      2013-12-17 21:26:02,575 ERROR [http-bio-8085-exec-25] [FiveOhOh] 500 Exception was thrown.
      java.lang.IllegalArgumentException: XSRF Token Validation failed (XSRF_FAILURE_NO_TOKEN_IN_COOKIE).
      	at com.atlassian.bamboo.ww2.interceptors.BambooXsrfTokenInterceptor.doIntercept(BambooXsrfTokenInterceptor.java:64)
      	at com.atlassian.bamboo.ww2.interceptors.AbstractBambooInterceptor.intercept(AbstractBambooInterceptor.java:34)
      

      Attachments

        1. Error1.png
          Error1.png
          80 kB
        2. ExpectedBehaviour.png
          ExpectedBehaviour.png
          74 kB

        Issue Links

          Activity

            People

              Unassigned Unassigned
              jalbion Janet Albion (Inactive)
              Votes:
              7 Vote for this issue
              Watchers:
              25 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: