@Thomas Deiler, I was able to find a solution. It actually had nothing to do with angular, server configs, etc.
I believe the Jira API documentation is very misleading (or plain wrong). Everything I read about the Authentication API mentioned 2 ways of maintaining a session: Through request headers or through an Oauth token.
Because using headers was the simplest implementation, I went with that, but it turns out that the Jira API does NOT use the JSESSIONID header what so ever. It uses cookies.
The reason it worked with Postman, is that Postman saves cookies returned/set by the API much like a browser would. And so it would submit the cookies along with the calls.
That said, my ExpressJS API would only send headers as the Jira documentation suggested. After fiddling around with many other ideas, I figured out that all I needed to do it send the JSESSIONID cookie along every call and it worked fine.
Here is a snippet of my NodeJS, ExpressJS code to help others:
const request = require('request-promise-native');
exports.syncIssues = (req, res) => {
// Create a cookie jar using request.jar API
const jar = request.jar();
// I call the session API and store the returned object
// on the browser side cookies (jira-login). In every single
// other calls, I parse that cookie to include it in a cookie
// jar inside the request options.
const jiraCookie = JSON.parse(cookies['jira-login']).value;
// I create the cookie using the request.cookie API
const cookie = request.cookie(`JSESSIONID=${jiraCookie}`);
const url = 'https://<jira endpoint here>';
// I set the cookie in the cookie jar
jar.setCookie(cookie, url);
const options = {
method: 'POST',
uri: 'https://<jira endpoint here>/rest/api/2/search',
body: {
jql: 'updated <= now()',
startAt: 0,
maxResults: 1,
},
json: true,
// Add the jar to the request options.
jar,
};
request(options)
.then((body) => {
res.json(body);
})
.catch((err) => {
res.status(err.statusCode).json(err);
});
};
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.