I have a private OAuth 2.0 (3LO) app registered in developer.atlassian.com. It’s a Flask web app that authenticates users against a Jira Cloud instance using the standard authorization code flow.
The problem:
Users who are not the app creator get a “failed to retrieve client” error on Atlassian’s authorization page. The app creator can authorize fine.
What I’ve done:
-
Enabled Sharing under Distribution (toggled on, hours ago)
-
Added a Privacy Policy URL
-
Verified the callback URL in Authorization → Configure is correct
-
Confirmed the
client_idin the app matches what’s in the authorization URL
My authorization URL structure:
https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=<id>&scope=read:jira-work+write:jira-work+offline_access&redirect_uri=<callback>&state=<state>&response_type=code&prompt=consent
Questions:
-
Does enabling the Sharing toggle require any additional step to take effect, or is it immediate?
-
Is there a known propagation delay after switching from Development to Sharing?
-
Is there any reason “failed to retrieve client” would persist after Sharing is enabled?