-
Type:
Suggestion
-
Resolution: Unresolved
-
Component/s: Identity Internal - OAuth
-
Jira Software
Issue Summary
The Atlassian Connect License API endpoint
(https://api.atlassian.com/ex/jira/{cloudId}/rest/atlassian-connect/1/addons/app-key)
does not support OAuth 2.0 (3LO) authentication. When attempting to migrate from basic authentication to OAuth 2.0 (3LO), requests to this endpoint fail with a 401 Unauthorized error, and there is no documentation on required scopes or support for 3LO apps.
Steps to Reproduce
- Register an OAuth 2.0 (3LO) app in the Atlassian Developer Console and request all available Jira scopes.
- Attempt to call the License API endpoint (https://api.atlassian.com/ex/jira/\{cloudId}/rest/atlassian-connect/1/addons/app-key) using a valid 3LO access token.
Expected Results
The API should return license information for the app, provided the access token has the necessary scopes.
Actual Results
{
"code": 401,
"message": "Unauthorized; scope does not match"
}
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available