Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-23856

No way to refresh trusted apps current application keys

    XMLWordPrintable

Details

    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

    Description

      NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion.

      The trusted apps current application keys are stored in a lazy reference in DefaultCurrentApplicationFactory. They are not reset by a cache cleared event, and there is no way to refresh the keys without restarting JIRA. This causes a problem in JIRA Studio where we have often needed to refresh keys. Use cases as follows:

      • Security breach requires resetting of all secrets
      • A customers import contains their old keys, which poses security risks to both Atlassian and the customer
      • Studio changes the way keys are managed to a shared key between all apps

      Since the keys are stored in ApplicationProperties, it is simple for Studio to set/change them, however, those changes won't be picked up until JIRA has restarted. This request is specifically for a mechanism to clear the cache without restarting JIRA.

      Attachments

        Issue Links

          Activity

            People

              bbain bain
              jroper James Roper [Atlassian]
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: