Issue Summary

Corresponding Confluence Issue: CONFSERVER-83364.

Corresponding Jira issue : JRASERVER-75719

Once the first application link is configured, the OAuth details are set. Any subsequent base url changes do not update the OAuth configuration. This leads to broken links on the "Authorized applications" page.

N.B. The authorisation works fine. So far only the links have been identified as broken. 

This is reproducible on Data Center: yes

Steps to Reproduce

1. Configure an application link between Bitbucket and Jira.
2. Change base url in Bitbucket or in Jira.
3. Delete the application link from both applications.
4. Create a new application link between Bitbucket and Jira.
5. Perform user authorisation between Bitbucket and Jira..
6. Go to "Authorized applications" in user profile
   1. in Jira: secure/ViewProfile.jspa?selectedTab=com.atlassian.oauth.serviceprovider:jira-user-access-tokens
   2. in Bitbucket: Base_URL/plugins/servlet/oauth/users/access-tokens

Expected Results

"Authorized applications" page displays correct links.

Actual Results

"Authorized applications" page displays links pointing to the old base url of the application, whose base url has changed.

Authorisation works correctly (e.g. Confluence displays Jira issue summaries). It's only the "Authorized applications" page that is broken.

Workaround

Steps to resolve the issue: Kindly perform the below steps in Bitbucket. 

1. Find the stale OAuth configuration in Bitbucket DC:

   SELECT * FROM plugin_setting WHERE key_name ='com.atlassian.oauth.consumer.ConsumerService:host.__HOST_SERVICE__' ;

2.  You should get precisely 1 result. If you got 0 or more than 1 rows, abort the procedure and contact Atlassian Support.
3. The result looks like this:

   Atlassian Bitbucket at http://myOLDcompanyname.com/bitbucket

4. If this is indeed the old base URL, you need to update plugin_setting with correct new base url: Please note that you only need to update URL as suggested below and not the entire key_value.

   UPDATE plugin_setting SET key_value = '<entier value as it is just replace description=Atlassian Bitbucket at http://myOLDcompanyname.com/bitbucket with Atlassian Jira at http://myNEWcompanyname.com/bitbucket>'
   WHERE key_name ='com.atlassian.oauth.consumer.ConsumerService:host.__HOST_SERVICE__' ;

   Sample:

   update plugin_setting set key_value='#java.util.Properties
   #Tue Feb 06 14:59:53 AEDT 2024
   privateKey=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
   name=Bitbucket
   signatureMethod=RSA_SHA1
   description=Atlassian Bitbucket at http://myNEWcompanyname.com/bitbucket  publicKey=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz8Ord8/tP90m9Wg+Pdf/hhy4wSpKG4SgP/nPafcX4FRdE682y6/oDBb8nI8gFRik2KwRKx5sTIKcrAcw/PI/4E3BC3dbI6xqn1OuLuv8vGw8GZjOnIN/6I/9eibbMFuEfljfdhI5gB8epK44weZe9KBQA+dG4l/sBdUw1sriLQ+Dl2yk4Agoq9iUsMv3IhYSbR74Shda1iPkQ8LE/DWmnw8MzcRtomQlR67H8XVvYP0PYddGPnIkM38c6w8vmr0+aZkYisWPuVNl/O9qQ4NhN8HePUl3cg/afo/O/3OHUHcfsOksB7ZyL2ehzEyY+TKQ011BaHiI01TXQ6oKFti+wIDAQAB
   key=Bitbucket\:4364791997'
   WHERE key_name ='com.atlassian.oauth.consumer.ConsumerService:host.__HOST_SERVICE__' ;
   

5. Remove the old application link (from both Jira/confluence and Bitbucket).
6. Restart Bitbucket
7. Create a new application link.

Steps to resolve the issue: Kindly perform the below steps in JIRA. 

1. Find the stale OAuth configuration:

   SELECT description
   FROM oauthconsumer
   WHERE consumerservice = '__HOST_SERVICE__'

2.  You should get exactly 1 result. If you got 0 or more than 1 rows, abort the procedure and contact Atlassian Support.
3. The result looks like this:

   Atlassian Jira at http://myOLDcompanyname.com/jira

4. If this is indeed the old base URL, update it by running:

   UPDATE oauthconsumer
   SET description = 'Atlassian Jira at http://myNEWcompanyname.com/jira'
   WHERE consumerservice = '__HOST_SERVICE__'

5. Remove the old application link (from both Jira and Bitbucket).
6. Restart Jira
7. Create a new application link.

Notes