-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Affects Version/s: 8.4.0, 8.3.2
-
Component/s: Apps - Team Calendar
-
None
-
2
-
Severity 3 - Minor
-
1
Issue Summary
Team Calendar private ICS url https://<confluence-base-url>/rest/calendar-services/1.0/calendar/export/subcalendar/private/<ics-file-name>.ics requires authentication starting from Confluence version 8.3.2 and 8.4.0.
This is reproducible on Data Center: (yes)
Steps to Reproduce
- In a Confluence instance running with version 8.3.2 and 8.4.0, add a Calendar.
- In the Right pane, click on ellipses (...) present next to the calendar added in the previous step and choose Subscribe Calendar.
- In the Calendar app drop-down, select Ical.
- Copy the ICS url from the Copy the Team Calendars URL text box.
- Access the Ical url using curl or wget, and it fails with a 401 error.
curl -v https://<confluence-base-url>/rest/calendar-services/1.0/calendar/export/subcalendar/private/<ics-file-name>.ics wget https://<confluence-base-url>/rest/calendar-services/1.0/calendar/export/subcalendar/private/<ics-file-name>.ics
Expected Results
In the earlier versions, the Ical url did not ask for authentication. The Private ICAL url should work without authentication.
Actual Results
The Ical url fails with a 401 error when accessed with the curl or wget command.
curl -v https://<confluence-base-url>/rest/calendar-services/1.0/calendar/export/subcalendar/private/<ics-file-name>.ics wget https://<confluence-base-url>/rest/calendar-services/1.0/calendar/export/subcalendar/private/<ics-file-name>.ics {code:java}
Workaround
Workarounds include:
- In Calendar integration systems that support it, use a personal access token to authenticate
- Enable anonymous access for the site.
Note that this also enables anonymous access to the dashboard, and any spaces that also have anonymous access explicitly enabled