Having trouble creating an attachment through the Jira API

[Chad_Lei]

I used a POST to https://jiradev.ngptools.com /jira/rest/api/2/issue/<caseID>/attachments

I have the authentication info in the header as usual.

I set the media type to multipart/form-data, content type for my test is text/plain and contentID testfile2.txt 

When I submit, I receive a response of the following – a 404 and XSRF check failed.  Researching the XSRF check failure, I found at Atlassian article that mentioned this can happen if the origin is not trusted – is there something we need to do on our side? 

Thanks for your help.

HTTP/1.1 404

Date: xxxx

Server: Apache/2.4.27 (Ubuntu)

X-AREQUESTID: 1190x9229x1

X-XSS-Protection: 1; mode=block

X-Content-Type-Options: nosniff

X-Frame-Options: SAMEORIGIN

Content-Security-Policy: frame-ancestors 'self'

X-ASEN: SEN-xxxx

X-Seraph-LoginReason: OK

X-ASESSIONID: xxxx

X-AUSERNAME: xxxx

Cache-Control: no-cache, no-store, no-transform

Content-Type: text/plain;charset=UTF-8

Set-Cookie: JSESSIONID=xxxx;path=/jira;Secure;HttpOnly

Set-Cookie: atlassian.xsrf.token=xxxx;path=/jira;Secure

Keep-Alive: timeout=3600, max=100

Connection: Keep-Alive

Transfer-Encoding: chunked

XSRF check failed

[Elifcan Cakmak]

Hello,

I encountered "XSRF check failed" error before and when I used 

"X-Atlassian-Token": "nocheck"

in the header while using the POST. You can try it out.

Regards,

Elifcan

[Chad_Lei]

that got rid of the XSRF error and i got an HTTP 200 back!

yet still no success with seeing an attachment on an issue 

What I sent:

POST /jira/rest/api/2/issue/xxx-xx/attachments HTTP/1.1

Host: jiradev.ngptools.com

Authorization: Basic Z2VyYWxkaGFydG1hbjpWVzJkXW58NF1DNUw=

X-Atlassian-Token: nocheck

Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW

cache-control: no-cache

Postman-Token: a69e3354-bef9-4236-865d-d66d9d853f35

Content-Disposition: form-data; name=""; filename="C:\Users\xxxx\Documents\Work\xxxx\xxxx\Testing\xxxx.txt

------WebKitFormBoundary7MA4YWxkTrZu0gW--

I also tried just embedding text – same result – no error, but no attachment:

POST /jira/rest/api/2/issue/xxx-xx/attachments HTTP/1.1

Host: jiradev.ngptools.com

Authorization: Basic Z2VyYWxkaGFydG1hbjpWVzJkXW58NF1DNUw=

X-Atlassian-Token: nocheck

Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW

cache-control: no-cache

Postman-Token: 7c5485fd-dcf4-4c8e-b3b2-0218b7d05ad2

Content-Disposition: form-data; name=""

Line of text

------WebKitFormBoundary7MA4YWxkTrZu0gW--

[Elifcan Cakmak]

Hello,

Is it possible that the user you are using to send post request don't have create attachment permission on that project?

Regards,

Elifcan

[Chad_Lei]

i believe i do have permissions, could it be any other issue?

[Elifcan Cakmak]

Hello,

This might be a little silly but worth a try :) Could you try like this:

POST /rest/api/2/issue/xxx-xx/attachments HTTP/1.1

Host: jiradev.ngptools.com/jira

It might be related to Postman. Maybe you can also try the request it with curl?

https://confluence.atlassian.com/jirakb/how-to-add-an-attachment-to-a-jira-issue-using-rest-api-699957734.html

Regards,

Elifcan

[Teja P]

Hi, Any luck on this issue. Can anyone help me out on how to resolve this XSRF check failed issue for JIRA attachments API. 

Any help/suggestions will be really helpful.

Thanks

[Thierry Incognito]

Am also running into this issue and would love to know why it is still returning "XSRF check failed". Have no issue attaching files to an issue normally, but can't seem to get past response code 404 "XSRF check failed". Below is what my call looks like:

headers={"Accept": "application/json", "X-Atlassian-Token" : "no-check"}

## have also removed "Accept" as well ##

url=base_url+"rest/api/3/issue/"+jira_id+ "/attachments/"
response = requests.post(url,headers,auth=auth,files={ "file" : (filename, open(rfilename,"rb"), content_type)})

We don't seem to have an issue with any other API requests at present, so being able to resolve this would be great. Thanks!!

Quick update: Tried doing the same thing via curl and got a similar error message: "XSRF check failedcurl: (6) Could not resolve host: no-check"

[Matthew Crocco]

I did not debug too much but when I run requests.requests("POST" .... it works,

files={'file': ('attachment.png',open('{}/attachment.png'.format(pth),'rb'), 'application-type')}
headers = {
'Accept': 'application/json',
'X-Atlassian-Token': 'No-Check',
'Authorization': 'Basic {}'.format(token)
}
response = requests.request("POST", url, headers=headers, data=payload, files=files, verify=False)

but when I run requests.post .... I get the 404 error as well. 

[Thierry Incognito]

Interesting. I just tried the same thing and it worked. Weird. 

Thanks!!!