I have a backend application that I want my Connect app to communicate with. The backend app has Atlassian authentication so it knows about their account id etc. The Connect app is served via NodeJS Express and has a React SPA.
When a user opens up my Connect tab on their instance, I’d like to safely communicate who that logged in user is so I can display relevant/personal information to them. Is that possible? I’m also open to any other suggestions. For example, I can serve the Connect app from the same domain and set a cookie there and use it in the requests but that’s not really a secure way to go.
I’m currently having an issue with the JWT token as the response I’m getting back is {"error":"invalid_grant","error_description":"The signature of the bearer token was invalid."}