Summary
In Cloud, it's possible to retrieve attachments for a request via REST API albeit being experimental (requires HTTP header "X-ExperimentalApi":"opt-in"). Example:
- GET /rest/servicedeskapi/request/{issueIdOrKey}/attachment
- GET /rest/servicedeskapi/request/{issueIdOrKey}/comment/{commentId}/attachment
Reference: https://docs.atlassian.com/jira-servicedesk/REST/cloud/#servicedeskapi/request/ {issueIdOrKey}/attachment
However, the underlying redirection in comments to /secure/
{"thumbnail" or "attachment"}
/
{commentId}
/myimage.png?fromIssue=
{issueId}
creates a problem for Connect Apps because Safari blocks cross-site cookies. This forces Apps to awkward and potentially unsafe proxies of the attachments.
Suggestion
Allow Jira to process attachment calls from API clients using the `ACT_AS_USER` mechanism to respect both user permissions and browser policies. And stabilize the APIs so the experimental header and label can be removed.
Suggestion
DEVHELP-5308 Failed to load