Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-14129

Enabling the XSRF in Bamboo cause the integration with JIRA 6.1.5 to break

XMLWordPrintable

      Steps to reproduce:

      1. install JIRA 6.1.5
      2. install Bamboo 5.3. Make sure the "Enable XSRF protection" is enabled via Bamboo Admin > Security > Security Settings >
      3. integrate JIRA with Bamboo using Oauth authentication OR Basic Access OR Trusted Application
      4. in the JIRA UI, it will shows that JIRA can't connect to Bamboo as per screenshot Error1.png. However, after disabling the XSRF in Bamboo, it will works immediately and show some build of empty build as per shown in ExpectedBehaviour.png
        In JIRA logs:
        2013-12-17 21:26:02,588 http-bio-9615-exec-15 WARN admin 1286x511x1 n79bat 127.0.0.1 /secure/ViewBambooPanelContent.jspa [ext.bamboo.web.ViewBambooPanelContent] Unable to to connect to Bamboo server. Nothing will be shown.
        com.atlassian.sal.api.net.ResponseStatusException: Unexpected response received. Status code: 500
        	at com.atlassian.applinks.core.auth.ApplicationLinksStringReturningResponseHandler.handle(ApplicationLinksStringReturningResponseHandler.java:19)
        	at com.atlassian.applinks.core.auth.ApplicationLinksStringReturningResponseHandler.handle(ApplicationLinksStringReturningResponseHandler.java:13)
        	at com.atlassian.applinks.core.auth.oauth.OAuthApplinksReturningResponseHandler.handle(OAuthApplinksReturningResponseHandler.java:51)
        

      In Bamboo log:

      2013-12-17 21:26:02,575 ERROR [http-bio-8085-exec-25] [FiveOhOh] 500 Exception was thrown.
      java.lang.IllegalArgumentException: XSRF Token Validation failed (XSRF_FAILURE_NO_TOKEN_IN_COOKIE).
      	at com.atlassian.bamboo.ww2.interceptors.BambooXsrfTokenInterceptor.doIntercept(BambooXsrfTokenInterceptor.java:64)
      	at com.atlassian.bamboo.ww2.interceptors.AbstractBambooInterceptor.intercept(AbstractBambooInterceptor.java:34)
      

        1. Error1.png
          80 kB
          Janet Albion
        2. ExpectedBehaviour.png
          74 kB
          Janet Albion

            Unassigned Unassigned
            jalbion Janet Albion (Inactive)
            Votes:
            7 Vote for this issue
            Watchers:
            25 Start watching this issue

              Created:
              Updated:
              Resolved: