How to use username and password to generate token or how to get that user authenticated

[Esther Evangeline. V]

We are creating an user interface for Cloud JIRA to update and create test cases in JIRA via API . The user will be entering user name and password for the login into user Interface.In the API authentication is done via user email Id and API token token but in the UI user will be providing only his username and password. So we need a way to authenticate the user using the API with only username and password from the user.

[Dario B]

Hello @Esther Evangeline. V ,

If I understand correctly, you are building a web application to to update and create test cases in JIRA and you are asking about possible ways to authenticate.

If this is the case, then there are different ways to proceed depending on what you are building. However, as written in 

Which authentication method should I use?

• Connect apps: Use JWT. You can also use OAuth 2.0 user impersonation.
• Other apps: Use OAuth 2.0 (3LO) for authentication and authorization.
• Not using an app: Use OAuth 1.0a. See OAuth for REST APIs (Jira platform), OAuth for REST APIs (Jira Service Desk), or OAuth for REST APIs (Confluence).

However, as mentioned in the OAuth for REST APIs (Jira platform) documentation page, if you are not building a connect app OAuth 2.0 (3LO) should be preferred above other authentication methods:

• Building a Connect app? If you are building an app that uses Atlassian Connect, authentication is built into the Atlassian Connect libraries. See Security for Connect apps.
• Building a non-Connect integration? If you are building an integration that doesn't use Connect, we recommend that you use OAuth 2.0 authorization code grants (3LO) for apps over other authentication methods, such as basic authentication and OAuth 1.0a. See Security for other integrations.

For more details about differences and implementation, please review below links:

• https://developer.atlassian.com/cloud/jira/platform/
• https://developer.atlassian.com/cloud/jira/platform/security-overview/
• https://developer.atlassian.com/cloud/jira/platform/security-for-other-integrations/

Finally, please notice that this might not be the best place to get help on development related questions. In case further help will be needed on this topic, you might want to refer to the resources listed in https://developer.atlassian.com/resources:

• Ask the Developers Community
• Create a Developer Support Request

Cheers,
Dario