API token generated from OAuth2 is returning 401

[Ashrafuzzaman A_K_M]

I generated API token and refresh token using OAuth2.

Here is my information about the scopes,

    scope: ['offline_access', 'read:me', 'read:account', 'read:jira-work', 'read:jira-user'],

    custom_params: { prompt: 'consent', audience: 'api.atlassian.com' },

I did get access_token and refresh_token successfully.

I am using the token to make the following API.

curl -X GET -H "Authorization: Bearer $API_TOKEN" \

-H "Accept: application/json" \

https://<company-subdomain>.atlassian.net/rest/api/2/issue/API-***

But I am getting 401. Am I doing something wrong?

[Andy Heinzer · Accepted solution]

Hi Ashrafuzzaman,
It appears that you are trying to call the Cloud site directly by its URL.  However the guide in OAuth 2.0 (3LO) apps explains that first you have to get the Cloudid of the site,

curl --request GET \
 --url https://api.atlassian.com/oauth/token/accessible-resources \
 --header 'Authorization: Bearer ACCESS_TOKEN' \
 --header 'Accept: application/json'

Once you have the id, you can then Construct the request URL, from that point your call will look more closely related to this one:

curl --request GET \
  --url https://api.atlassian.com/ex/jira/11223344-a1b2-3b33-c444-def123456789/rest/api/2/project \
  --header 'Authorization: Bearer ACCESS_TOKEN' \
  --header 'Accept: application/json'

Try this and see if that helps.

Andy

[Ashrafuzzaman A_K_M]

That was it. Thanks for helping