Uploaded image for project: 'Jira Cloud'
  1. Jira Cloud
  2. JRACLOUD-23856

No way to refresh trusted apps current application keys

    XMLWordPrintable

Details

    • Suggestion
    • Resolution: Fixed
    • None
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

    Description

      NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion.

      The trusted apps current application keys are stored in a lazy reference in DefaultCurrentApplicationFactory. They are not reset by a cache cleared event, and there is no way to refresh the keys without restarting JIRA. This causes a problem in JIRA Studio where we have often needed to refresh keys. Use cases as follows:

      • Security breach requires resetting of all secrets
      • A customers import contains their old keys, which poses security risks to both Atlassian and the customer
      • Studio changes the way keys are managed to a shared key between all apps

      Since the keys are stored in ApplicationProperties, it is simple for Studio to set/change them, however, those changes won't be picked up until JIRA has restarted. This request is specifically for a mechanism to clear the cache without restarting JIRA.

      Attachments

        Issue Links

          Activity

            People

              bbain bain
              jroper James Roper [Atlassian]
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: