Adding IP allowlist to a Jira site breaks Widget setting page

XMLWordPrintable

    • 18
    • Severity 3 - Minor
    • 12

      Issue Summary

      A Jira site can add IP allow listing as explained here -> https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/
      However, due to recent changes for improving Jira security, this setting now breaks Widget. This is because an internal call from Widget service to Jira service fails.

      Steps to Reproduce

      1. Go to the setting explained in https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/
      2. Add the Outgoing connection IP addresses defined in https://support.atlassian.com/organization-administration/docs/ip-addresses-and-domains-for-atlassian-cloud-products/#Outgoing-Connections.
      3. These IP addresses cover the outgoing connections hence Jira keeps on working fine, but the Widget setting page doesn't work, because of an internal API call that fails

      Expected Results

      Widget setting should keep working

      Actual Results

      The widget setting page gives an error

      We can't load the widget right now. Try again in a little while. 

      Workaround

      There are no IP addresses we can recommend adding right now which would fix this. And the final solution requires an architectural change in how we authenticate the internal requests. So no workaround right now.

              Assignee:
              Sovan Ghosh
              Reporter:
              Nakul Mohan
              Votes:
              10 Vote for this issue
              Watchers:
              20 Start watching this issue

                Created:
                Updated:
                Resolved: