How to enable CORS in Jira data center 8.20

[Owen]

I invoke jira REST API  in use Confluence user marco by javascript.  And error reported.

After get above error, I do below action:

1. Enable allow list between my Jira and Confluence, both inbox and outbox are in the allow list and show green on both allow list page;

2. My Jira behind nginx 1.20 reverse proxy. So I add below configuration in my nginx.conf

add_header 'Access-Control-Allow-Origin' 'https://mydomain.com'; 

add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';

add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization'; 

if ($request_method = 'OPTIONS')

  { add_header 'Access-Control-Allow-Origin' 'https://mydomain.com';

    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';

    add_header 'Access-Control-Allow-Headers' 'Content-Type, Authorization';

     add_header 'Content-Length' 0; return 204; }

But still got above CORS error. 

Please help on this case. I had been blocked for 1 day.  

Thank you very much!

[Marc - Devoteam]

Hi @Owen 

This has been answered earlier, see cors-error-with-rest-api.

There is also a KB article on it, getting-cors-errors-when-accessing-confluence-resources 

[Owen]

The two article did not give an clear solution for such case. 

[Marc - Devoteam]

Hi @Owen 

The you are impacted by the web.xml change that Atlassian implemented in version above 7.15

See, CONFSERVER-80056 

[Owen]

Thanks! Marc

Set the source URL in the Target Jira allowlist is fine.  Sorry for late reply!