With atlassian new authentication enabled, doauthentication.action with redirection to admin page does not work in non browser env

XMLWordPrintable

    • Type: Bug
    • Resolution: Won't Fix
    • Priority: Low
    • None
    • Affects Version/s: 9.1.0
    • None
    • Severity 3 - Minor

      With atlassian new authentication enabled (since 9.1.0), doauthentication.action with redirection to admin page does not work in non browser env, as the web sudo authenticated jsessionid in cookie from the doauthentication.action response does not work when used in the follow redirect request for the target admin page

       

      Issue Summary

      This is reproducible on Data Center: YES

       

      Issue logs

       

       

      Steps to Reproduce

      Using postman or terminal (with curl ) to call `doauthenticate.action` with:

      • Authentication
        • basic auth using an admin credential
      • header:
        • X-Atlassian-Token: no-check
      • body:
          • password: your-password
          • authenticate: Confirm
          • destination: /admin/scheduledjobs/viewscheduledjobs.action (or any admin path)

       

      Expected Results

      Successfully render the content of destination admin page

      Actual Results

      Been redirected to admin web sudo authentication dialog again

      Workaround 1

      Revert back to the legacy authentication mode with jvm property: `-Datlassian.authentication.legacy.mode=true`

        1. image-2024-10-25-16-19-00-087.png
          135 kB
          Jeffery Xie
        2. image-2024-10-25-16-19-31-844.png
          95 kB
          Jeffery Xie
        3. image-2024-10-25-16-20-08-564.png
          122 kB
          Jeffery Xie
        4. image-2024-10-25-16-27-51-158.png
          181 kB
          Jeffery Xie
        5. image-2024-10-25-16-31-16-166.png
          1.17 MB
          Jeffery Xie

            Assignee:
            Unassigned
            Reporter:
            Jeffery Xie
            Votes:
            6 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: