"Unauthorized; scope does not match" when reading issue worklogs

Forge
, ,
1

Hello,

I’m trying to access the endpoint

/rest/api/2/issue/{issueIdOrKey}/worklog

and getting the “Unauthorized; scope does not match” error. I’ve specified the following scopes in the manifest.yml

- read:app-system-token
- read:app-user-token
- read:jira-work
- read:jira-user
- read:project:jira
- read:issue-details:jira
- read:board-scope:jira-software
- read:board-scope.admin:jira-software
- read:epic:jira-software
- read:issue:jira-software
- read:sprint:jira-software
- read:issue:jira
- read:issue-worklog:jira
- read:issue-worklog.property:jira
- read:user:jira
- read:group:jira
- read:project-role:jira
- read:avatar:jira

According to the documentation here:

https://developer.atlassian.com/cloud/jira/platform/rest/v2/api-group-issue-worklogs/#api-rest-api-2-issue-issueidorkey-worklog-get

the scopes should be enough. Any help would be appreciated.

Thanks, Tuomas

2

Hi @tuomas1 ,

The granula scopes you listed look sufficient to me. I can only suggest a few checks and experiments such as double checking the latest version of the app has been deployed and installed, switching from asApp to asUser if the call is currently being made with asApp, checking if the problem is related to the permissions relating to the worklog detailed in the API documentation above the scopes section, and switching the app to classic scopes and using read:jira-work for this call.

Regards,
Dugald

3

Thanks. While trying out the different scopes I noticed that the /ex/jira/8a1... part of the URL was incorrect and setting it correctly fixed the issue.

The error message is highly confusing. Leaving this reply here in case others hit similar issues.