Retrieving info for JSM Customers

Hello:

I have this issue since 2020. I’m doing a customer portal for our organization, with Jira service desk integration using .NET Core.

We need our customers to access our portal and check their opened issues, add coments and attachments, and create new issues. I don’t mind using Basic Auth or OAUTH2, because I already tried to implement both ways, but I can’t figure it out how to do it.

Using Basic Auth, I need an API Token, but it can be created only for Atlassian users and “service accounts” Manage API tokens for your Atlassian account | Atlassian Support . I don’t know how to create an API Token for a JSM customer, or how to relate JSM customer with a service account.

Using OAUTH2, the Atlassian login page only allow users to log in, not JSM customers. I can create a “technical user” to get only user information with the customer log in information on our platform, but it means we need to share the “technical user” and password to all our customers, in order for them to write the credentials manually on Jira login page.

What about using “technical user” with “Basic Auth”, and then filtering? Ok, it’s possible, but all issues and comments are created by that technical user. In comments I can add “created by…” at the start of the comment, and I can use the field “CreateOnBehalfOf” to point to the customer adding the issue… BUT I need its Atlassian customer ID, and Basic Auth can’t retrieve customers info, it’s only avaiable on OAUTH2 (and Forge), and only on Jira API, Service-Desk API can only create customers.

So, I don’t know how to allow our customers to ask for their issues, check an send comments using any Jira Rest API.
I could attach the Service Desk portal to ours… but it doesn’t support open in a frame either, and forcing our customers to log on our platform, then redirect to external link, and then loging again on Service Desk it’s out of the point.

I asked on the old support page, I asked by mail back then, on 2020, I asked again last friday, and I’m asking now to the comunity.

Did someone do anything similar?