Cross product user impersonation

[szn]

hi @JanetCarr,

I am looking for a very similar solution (although in the opposite direction):

Confluence Addon talking to Jira (cloud)

I want my Confluence Cloud Atlassian Connect Express plugin to access Jira Cloud rest API. Preferably as smooth for the user as possible. For example read only in asApp mode, and R/W in asUser after oauth dance. I am doing my best to dig into OAuth documentation but I am lost. As far as I understand: A/ Confluence Addon ACE talking to Confluence rest API For ‘as app’ calls it’s easy thanks to JWT and httpClient available in app.js by default (which is npm’s request under the hood). I tested …

I was able to perform full OAuth 2.0 (3LO) dance using cURL. Read my latest comment and try to follow the documentation (it was updated lately).

Now I’m mostly concern about this:

Note that making your app public does not make it available on the Atlassian Marketplace. Listing a OAuth 2.0 (3LO) app on the Atlassian Marketplace is currently not supported.

Additionally: your two-apps solution intrigued me. With OAuth I have to ask each and every user to authorise. With two apps I only have to convince admin to make two installs.

I am just curios how do you link these separate instances?

ACE for product “A” simplifies making request to the same product by reusing JWT. In other words it’s easy to make a request from JIRA Add-on to JIRA API as long as you a JWT delivered with user request. Having a secondary JIRA Confluence Add-on is not enough as you can’t reuse the same JWT from JIRA.