CODEWITHSUNDEEP
jirajira-rest-apijira-rest-java-apiatlassian-plugin-sdk
Raghav Mishra
Raghav Mishra

Reputation: 589

How can I perform a password grant to get Auth token for Jira Software API?

We're working to get the Auth token for a user from Jira. This Auth token will be used to make API calls to get the Issues from the Jira platform for the users (my agents). To get this Auth token, I'm getting the username & password of my agent, however, there is no API for Password grant to get the Auth token in the Jira APIs. All their OAuth authentication is also 3LO (3 Legged OAuth, Where the user has to be involved). Is there an easier way to extract the OAuth using simple username and password.

Note: I have checked the Basic Authentication feature to make API calls, But it also requires username and API token of the agent. I don't think it's possible to individually create the API token for each agent.

Upvotes: 1

Views: 180

Answers (1)

David Bakkers
David Bakkers

Reputation: 555

You're trying to defeat a basic security principle... only the person who has the account can create or read the token, that's the whole point of 3L OAuth or the key + token access method.

If you want to use someone's account key and token to impersonate them, only THEY can give them to you, not Jira.

Upvotes: 0

Related Questions