oAuth2 - Failed to validate authorization server response (state mismatch)

[GavinAttard]

Hi
I’m trying to get an API connection via Knime platform using oAuth 2.
Once i am taken to the request access page and click accept. The re-direct page is loaded with the error : Failed to validate authorization server response (state mismatch)

The re-direct page contains the state parameter i passed in the auth endpoint and the code.

What am i missing?

Thanks Gavin

[ibuchanan]

Welcome to the Atlassian developer community @GavinAttard,

That error message sounds like it’s coming from the Knime platform, not from Atlassian. The final step of the OAuth 2.0 authorization code flow has Atlassian redirecting back to the “callback URI”, where the state parameter should be verified as the same. So that’s the client’s job (in this case Knime). Have you asked them?

Meanwhile, a couple troubleshooting steps you could perform to help isolate the problem:

Run the OAuth flow without Knime to make sure there’s nothing wrong with your client id/secret. Here’s a way you could do that on the command-line:

OAuth 2.0 token

Now that you’ve linked to the docs, I had a quick look. Jira Spoke does apparently “speak OAuth”. I don’t think you should need to be messing around with OAuth 2 on the CLI. It certainly should not be needed by Jira Spoke. That said, maybe you’ll find some diagnostic value making sure that your app settings are valid, so I’ll share some tools here. Install oauth2c. Install jq. Install xh. Or, you can quickly switch xh for httpie, which is CLI compatible. If not, you might be able to change my…

Conversely, run the Knime authorization without Atlassian. You can quickly create a “fake” authorization server for testing here:
https://www.oauth.com/playground/