atlassian / atlassian/atlascode

Instructions on how to configure an API Token with Scopes for Jira Authentication

Open
#476 4 comments 0 reactions 0 assignees View on GitHub
cloud JIRA
Dominant language
TypeScript
Stars
129
Forks
82
Avg merge
3h 3m
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
When authenticating the extension with Jira Cloud sites where the user's authentication method is SSO using Google, the extension asks for an API token.

When creating an API Token in the Atlassian interface, there is a warning with the following details:
```
API tokens without scopes are being deprecated
We encourage creating the more secure API tokens with scopes whenever possible.
```

It's not clear what Scopes should be applicable to an API Token to use with the AtlasCode extension for authenticating with Jira.

**Describe the solution you'd like**
- Provide details in the extension of what API Token Scopes are needed for AtlasCode's Jira connection.
- Have a preconfigured scopes option for the extension visible in the API Tokens interface.

**Describe alternatives you've considered**
- Change the AtlasCode Jira authentication to use OAuth similar to the AtlasCode BitBucket authentication.

**Additional context**

## Jira Authentication and attempting to create an API Token with Scopes
![AtlasCode Jira Cloud authentication modal](https://github.com/user-attachments/assets/c43ca8ef-9e3a-4416-9568-bc5b8fb88f95)
---
![Atlassian API Tokens interface](https://github.com/user-attachments/assets/81dbf72f-982d-4976-b8b1-3e33904d29e8)
---
![Atlassian Scoped API Tokens wizard page 1 - Name and Expiry](https://github.com/user-attachments/assets/4981726d-22a0-40b8-8f1c-6d6283f1b813)

---
![Atlassian Scoped API Tokens wizard page 2 - Select App](https://github.com/user-attachments/assets/416af73c-386c-4a75-a78b-38d490c6fc79)
---
![Atlassian Scoped API Tokens wizard page 3 - Select Scopes](https://github.com/user-attachments/assets/370c914e-1d42-42e5-8d47-70bbf303fb6a)
---
## Outcome of Bitbucket authentication, not requiring an API Token
![Atlassian Scoped API Tokens wizard page 4 - Create Token](https://github.com/user-attachments/assets/2b529cc8-fc40-4cd1-9e3d-3658a33214e9)

Contributor guide

Open the contributing guide

Research direction

The issue names no files, tests, or entry points. Start by locating the Jira authentication flow and reviewing the Atlassian scoped-token requirements; done means the required scopes and setup instructions are clearly provided, with any requested extension or interface changes defined.

Written by the indexing model from the issue text.

Assessment

Domain
api, authentication, documentation
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.