I'm trying to connect to JIRA from my app with OAuth2, following this official guide:
https://developer.atlassian.com/cloud/jira/platform/oauth-2-authorization-code-grants-3lo-for-apps
But, I can't figure out where to find the STATE value for the first step of getting an authorization code.
The documentation says : state=YOUR_USER_BOUND_VALUE - Set this to a value that is associated with the user you are directing to the authorization URL, e.g., a hash of the user’s session ID.
Where can I find this value?
It's supposed to be an arbitrary value. The problem was in something else.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
state
: (required for security) Set this to a value that is associated with the user you are directing to the authorization URL, e.g., a hash of the user’s session ID. Make sure that this is a value that cannot be guessed. You may be able to generate and validate this value automatically, if you are using an OAuth 2.0 client library or an authentication library with OAuth 2.0 support. For more information, including why this parameter is required for security, see What is the state parameter used for? below.You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Wow I can't see how it's useful to copy the documentation he already mentioned in the question... There is no explanation in this doc.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Is there another possible values for the state ?You are mentioning a hash of the user's session ID, where can I get those considering that the user is not yet authorized ?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.