-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
5.10.8, 6.13.0, 9.2.0, 8.5.18
-
2
-
Severity 3 - Minor
-
2
-
Issue Summary
A Confluence user that has no login permission in Jira tries to create/use Jira Issue Macro while editing a Confluence page will send hundreds of requests to Jira application.
Environment
- Confluence integrated with Jira
- Confluence user has no login permission in Jira
- Jira Service Desk installed
- Context path configured in Jira
Steps to Reproduce
- In Confluence, create a new Page
- Add Jira Issue Macro
Expected Results
- No spam of requests to Jira application.
- No timeout error in the UI, instead show a login failure.
Actual Results
The below exception is thrown in the Jira's access_log file:
10.60.3.46 555x801x1 confluence [29/Jan/2019:09:15:07 +0800] "GET /j7130/j7130/servicedesk/customer/portals?xoauth_requestor_id=confluence HTTP/1.1" 302 - 9 "-" "Apache-HttpClient/4.4.1 (Java/1.8.0_74)" "140v2he"
There are 1400+ requests of the same on Jira by just a single action in Confluence
Note the duplicate (doubled) of Jira's context path /j7130/j7130
The below error is seen in the UI of Confluence:
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
- is related to
-
CONFSERVER-99130 Editing a Jira Issue Macro when Application Link with OAuth Impersonation causes StackOverflowError
-
- Gathering Impact
-