-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Component/s: Organize - Sidebar (Content Tree)
-
None
-
1
-
Severity 3 - Minor
Issue Summary
OAuth 2.0 scope "read:folder:confluence" is missing from the selectable granular scopes list for Confluence REST API, resulting in 401 Unauthorized errors when attempting to access folder endpoints via service accounts.
Steps to Reproduce
- Create or use a service account
- Assign all available Confluence read scopes to the service account, excluding "read:folder:confluence" (since it is not selectable).
- Attempt to make a GET request to the following Confluence REST API endpoints:
- Observe the API response.
Expected Results
The API call should succeed, returning the requested folder or folder properties data, provided the service account has all necessary read permissions.
Actual Results
The API call fails with a 401 Unauthorized error and the message:
{
"code": 401,
"message": "Unauthorized; scope does not match"
}
Despite all available read scopes being assigned, access is denied because "read:folder:confluence" is not present in the selectable scopes.
Workaround
Currently, there is no direct workaround, as the required "read:folder:confluence" scope is not available for selection or assignment to service accounts.
Until the scope is made available, folder endpoints can't be accessed via the REST API using service accounts.
- mentioned in
-
Page Loading...