AppLink problem

[Alexey Astafyev]

Hi there.

We have link between Jira and Confluence.

On Confluence side everything works fine.

But on Jira side we get an error when try searching - The Jira server was contacted but has returned an error response. We are unsure of the result of this operation.

In debug mode on Jira side:

[o.apache.http.headers] http-outgoing-91801 >> GET /rest/api/search?cql=text+%7E+%22test1%22+AND+type+NOT+IN+%28attachment%2Ccomment%29&limit=10&expand=body HTTP/1.1
[o.apache.http.headers] http-outgoing-91801 >> Authorization: OAuth oauth_token="$token$", oauth_consumer_key="$key$", oauth_signature_method="RSA-SHA1", oauth_timestamp="1658219496", oauth_nonce="$nonce$", oauth_version="1.0", oauth_signature="$signature$"
[o.apache.http.headers] http-outgoing-91801 >> Host: conf.domain.tld
[o.apache.http.headers] http-outgoing-91801 >> Connection: Keep-Alive
[o.apache.http.headers] http-outgoing-91801 >> User-Agent: Apache-HttpClient/4.5.13 (Java/11.0.13)
[o.apache.http.headers] http-outgoing-91801 >> Accept-Encoding: gzip,deflate

[o.apache.http.wire] http-outgoing-91801 >> "GET /rest/api/search?cql=text+%7E+%22test1%22+AND+type+NOT+IN+%28attachment%2Ccomment%29&limit=10&expand=body HTTP/1.1[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "Authorization: OAuth oauth_token="$token$", oauth_consumer_key="$key$", oauth_signature_method="RSA-SHA1", oauth_timestamp="1658219496", oauth_nonce="$nonce$", oauth_version="1.0", oauth_signature="$signature$"[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "Host: conf.domain.tld[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "Connection: Keep-Alive[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "User-Agent: Apache-HttpClient/4.5.13 (Java/11.0.13)[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "Accept-Encoding: gzip,deflate[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 >> "[\r][\n]"

[o.apache.http.wire] http-outgoing-91801 << "HTTP/1.1 403 [\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Server: nginx/1.16.1[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Date: Tue, 19 Jul 2022 08:31:36 GMT[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Content-Type: application/json[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Transfer-Encoding: chunked[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Connection: keep-alive[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Set-Cookie: JSESSIONID=2E51CBA0972CC623249600E4FA764D4E; Max-Age=86400; Expires=Wed, 20-Jul-2022 08:31:54 GMT; Path=/; Secure; HttpOnly[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Cache-Control: no-store[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Expires: Thu, 01 Jan 1970 00:00:00 GMT[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "X-Content-Type-Options: nosniff[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Content-Encoding: gzip[\r][\n]"
[o.apache.http.wire] http-outgoing-91801 << "Vary: User-Agent[\r][\n]"

[o.apache.http.headers] http-outgoing-91801 << HTTP/1.1 403 
[o.apache.http.headers] http-outgoing-91801 << Server: nginx/1.16.1
[o.apache.http.headers] http-outgoing-91801 << Date: Tue, 19 Jul 2022 08:31:36 GMT
[o.apache.http.headers] http-outgoing-91801 << Content-Type: application/json
[o.apache.http.headers] http-outgoing-91801 << Transfer-Encoding: chunked
[o.apache.http.headers] http-outgoing-91801 << Connection: keep-alive
[o.apache.http.headers] http-outgoing-91801 << Set-Cookie: JSESSIONID=2E51CBA0972CC623249600E4FA764D4E; Max-Age=86400; Expires=Wed, 20-Jul-2022 08:31:54 GMT; Path=/; Secure; HttpOnly
[o.apache.http.headers] http-outgoing-91801 << Cache-Control: no-store
[o.apache.http.headers] http-outgoing-91801 << Expires: Thu, 01 Jan 1970 00:00:00 GMT
[o.apache.http.headers] http-outgoing-91801 << X-Content-Type-Options: nosniff
[o.apache.http.headers] http-outgoing-91801 << Content-Encoding: gzip
[o.apache.http.headers] http-outgoing-91801 << Vary: User-Agent

In debug mode on Confluence side

[http-nio-8090-exec-35] [atlassian.seraph.filter.BaseLoginFilter] doFilter doFilter : ____ Attempting login for : '/rest/api/search?cql=text+%7E+%22test1%22+AND+type+NOT+IN+%28attachment%2Ccomment%29&limit=10&expand=body'
[http-nio-8090-exec-35] [atlassian.seraph.filter.PasswordBasedLoginFilter] login login : No user name or password was returned. No authentication attempt will be made. User may still be found via a SecurityFilter later.
[http-nio-8090-exec-35] [atlassian.seraph.filter.BaseLoginFilter] doFilter doFilter : Login completed for 'null' - os_authstatus = 'null'
[http-nio-8090-exec-35] [atlassian.seraph.filter.SecurityFilter] doFilter doFilter : Storing the originally requested URL (atlassian.core.seraph.original.url=/rest/api/search?cql=text+%7E+%22test1%22+AND+type+NOT+IN+%28attachment%2Ccomment%29&limit=10&expand=body)
[http-nio-8090-exec-35] [atlassian.seraph.filter.SecurityFilter] doFilter doFilter : requiredRoles = []
[http-nio-8090-exec-35] [atlassian.seraph.auth.DefaultAuthenticator] getUserFromCookie getUserFromCookie : Got username : 'null' from cookie, attempting to authenticate user is known
[http-nio-8090-exec-35] [atlassian.seraph.auth.DefaultAuthenticator] getUser getUser : User not found in either Session, Cookie or Basic Auth.
[http-nio-8090-exec-35] [atlassian.seraph.filter.SecurityFilter] doFilter doFilter : Setting Auth Context to be 'anonymous '

It turns out that Confluence can't find user with needed token. I suspect that successful authentication should include something like:

[atlassian.seraph.auth.DefaultAuthenticator] getUserFromSession getUserFromSession : Session found; 'user' is present

But it's absent

Any ideas to resolve/debug the issue?

[Alexey Astafyev]

*** DELETED ***

[Alexey Astafyev]

*** DELETED ***

[Alexey Astafyev]

*** DELETED ***

[Alexey Astafyev]

*** DELETED ***