• Icon: Suggestion Suggestion
    • Resolution: Unresolved
    • Attachments
    • None
    • 8
    • 1
    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      NOTE: This suggestion is for JIRA Service Desk Cloud. Using JIRA Service Desk Server? See the previously corresponding suggestion.

      Summary

      In Cloud, it's possible to retrieve attachments for a request via REST API albeit being experimental (requires HTTP header "X-ExperimentalApi":"opt-in"). Example:

      • GET /rest/servicedeskapi/request/{issueIdOrKey}/attachment
      • GET /rest/servicedeskapi/request/{issueIdOrKey}/comment/{commentId}/attachment

      Reference: https://docs.atlassian.com/jira-servicedesk/REST/cloud/#servicedeskapi/request/ {issueIdOrKey}/attachment

      However, the underlying redirection in comments to /secure/

      {"thumbnail" or "attachment"}

      /

      {commentId}

      /myimage.png?fromIssue=

      {issueId}

      creates a problem for Connect Apps because Safari blocks cross-site cookies. This forces Apps to awkward and potentially unsafe proxies of the attachments.

      Suggestion

      Allow Jira to process attachment calls from API clients using the `ACT_AS_USER` mechanism to respect both user permissions and browser policies. And stabilize the APIs so the experimental header and label can be removed.

          Form Name

            [JSDCLOUD-4952] REST API to retrieve attachments from requests

              Unassigned Unassigned
              ywoo Yit Wei
              Votes:
              22 Vote for this issue
              Watchers:
              17 Start watching this issue

                Created:
                Updated: