# \#oauth2 **URL:** https://community.developer.atlassian.com/tag/oauth2/203.md [Latest](https://community.developer.atlassian.com/latest.md) · [Categories](https://community.developer.atlassian.com/categories.md) · [Tags](https://community.developer.atlassian.com/tags.md) --- ## ["The auth window was closed" when using external authentication](https://community.developer.atlassian.com/t/the-auth-window-was-closed-when-using-external-authentication/71352)
**Author:** [@ScottB](https://community.developer.atlassian.com/u/ScottB)\ **Replies:** 2\ **Last updated:** [October 6, 2026, 3:51pm UTC](https://community.developer.atlassian.com/t/the-auth-window-was-closed-when-using-external-authentication/71352 "2026-10-06T15:51:53Z")
We have a private oauth2 provider that I have set up for external authentication from Forge. The oauth flow authorizes and the token is exchanged, however the Forge app still shows “the auth window was closed” as seen i… --- ## [Bitbucket Cloud OAuth: consent screen shown on every authorization, consent no longer remembered](https://community.developer.atlassian.com/t/bitbucket-cloud-oauth-consent-screen-shown-on-every-authorization-consent-no-longer-remembered/102357)
**Author:** [@JamesS](https://community.developer.atlassian.com/u/JamesS)\ **Replies:** 2\ **Last updated:** [September 22, 2026, 6:33pm UTC](https://community.developer.atlassian.com/t/bitbucket-cloud-oauth-consent-screen-shown-on-every-authorization-consent-no-longer-remembered/102357 "2026-09-22T18:33:06Z")
We run a CI/preview-environment product that uses Bitbucket Cloud OAuth 2.0 (authorization code grant) for user login. Starting around late July 2026, users report that they are shown the Atlassian consent screen on ever… --- ## [RFC-89: Introducing OAuth2 to Trello](https://community.developer.atlassian.com/t/rfc-89-introducing-oauth2-to-trello/90359)
**Author:** [@SteveRonderos](https://community.developer.atlassian.com/u/SteveRonderos)\ **Replies:** 33\ **Last updated:** [September 15, 2026, 6:10pm UTC](https://community.developer.atlassian.com/t/rfc-89-introducing-oauth2-to-trello/90359 "2026-09-15T18:10:21Z")
RFCs are a way for Atlassian to share what we’re working on with our valued developer community. It’s a document for building shared understanding of a topic. It expresses a technical solution, but can also communicate … --- ## [403 "Current user not permitted to use Confluence" when using OAuth 2.0 Service Account token with Confluence Search API](https://community.developer.atlassian.com/t/403-current-user-not-permitted-to-use-confluence-when-using-oauth-2-0-service-account-token-with-confluence-search-api/101788)
**Author:** [@AkhilMohanan](https://community.developer.atlassian.com/u/AkhilMohanan)\ **Replies:** 3\ **Last updated:** [September 15, 2026, 8:23am UTC](https://community.developer.atlassian.com/t/403-current-user-not-permitted-to-use-confluence-when-using-oauth-2-0-service-account-token-with-confluence-search-api/101788 "2026-09-15T08:23:02Z")
I’m trying to access the Confluence Search API using an OAuth 2.0 service account, but I’m getting a 403 Forbidden error. What I’ve done Created a service account. Generated a Client ID and Client Secret. Granted the s… --- ## [Requirements and typical timeline for 3LO app approval before commercial distribution?](https://community.developer.atlassian.com/t/requirements-and-typical-timeline-for-3lo-app-approval-before-commercial-distribution/102659)
**Author:** [@ShinInseob](https://community.developer.atlassian.com/u/ShinInseob)\ **Replies:** 0\ **Last updated:** [September 14, 2026, 3:09am UTC](https://community.developer.atlassian.com/t/requirements-and-typical-timeline-for-3lo-app-approval-before-commercial-distribution/102659 "2026-09-14T03:09:31Z")
Hi Experts, We’re planning a 3LO (OAuth 2.0) integration with Jira Cloud for a commercial multi-tenant B2B product. Before we start building, we’d like to understand: What documentation/submissions are required for 3L… --- ## [No path for a Forge app (or any non-expiring credential) to manage group membership — confirmed by Atlassian, feature request ECO-1713 open for votes](https://community.developer.atlassian.com/t/no-path-for-a-forge-app-or-any-non-expiring-credential-to-manage-group-membership-confirmed-by-atlassian-feature-request-eco-1713-open-for-votes/102337)
**Author:** [@AlexZiegltrum](https://community.developer.atlassian.com/u/AlexZiegltrum)\ **Replies:** 1\ **Last updated:** [August 27, 2026, 12:28pm UTC](https://community.developer.atlassian.com/t/no-path-for-a-forge-app-or-any-non-expiring-credential-to-manage-group-membership-confirmed-by-atlassian-feature-request-eco-1713-open-for-votes/102337 "2026-08-27T12:28:04Z")
The use case We built a Forge app that grants issue-level read access based on user fields of a source issue. In a Jira Software project, an access grant is worthless without product access — so the app must add and remo… --- ## [Forge Remote access to tokens anytime is now in Preview](https://community.developer.atlassian.com/t/forge-remote-access-to-tokens-anytime-is-now-in-preview/83701)
**Author:** [@DanielReed](https://community.developer.atlassian.com/u/DanielReed)\ **Replies:** 17\ **Last updated:** [August 18, 2026, 2:39pm UTC](https://community.developer.atlassian.com/t/forge-remote-access-to-tokens-anytime-is-now-in-preview/83701 "2026-08-18T14:39:10Z")
We are pleased to announce that Forge Remote Access to tokens anytime, is now in Preview. Extending oAuth token life We understand that there are various use cases that require communication with Atlassian APIs from a r… --- ## [Forge "Runs on Atlassian" and GitHub Connection](https://community.developer.atlassian.com/t/forge-runs-on-atlassian-and-github-connection/102130)
**Author:** [@PaulLunkenheimer](https://community.developer.atlassian.com/u/PaulLunkenheimer)\ **Replies:** 2\ **Last updated:** [August 13, 2026, 6:27am UTC](https://community.developer.atlassian.com/t/forge-runs-on-atlassian-and-github-connection/102130 "2026-08-13T06:27:23Z")
Hello, We are currently in the process of migrating an Atlassian Connect Express app to Forge. This app offers users the possibility to connect to GitHub / GitLab and pull and push certain files. Can we migrate this f… --- ## [OAuth 2.0 3LO: granular \*:jira-software scopes present in token but /rest/agile/1.0/\* returns 401 "scope does not match"](https://community.developer.atlassian.com/t/oauth-2-0-3lo-granular-jira-software-scopes-present-in-token-but-rest-agile-1-0-returns-401-scope-does-not-match/100456)
**Author:** [@MayankBaber](https://community.developer.atlassian.com/u/MayankBaber)\ **Replies:** 2\ **Last updated:** [July 24, 2026, 3:37pm UTC](https://community.developer.atlassian.com/t/oauth-2-0-3lo-granular-jira-software-scopes-present-in-token-but-rest-agile-1-0-returns-401-scope-does-not-match/100456 "2026-07-24T15:37:23Z")
OAuth 2.0 (3LO) tokens issued by auth.atlassian.com contain my requested granular Jira Software scopes (verified via JWT decode), but every call to /rest/agile/1.0/\* returns: HTTP/1.1 401 {“code”:401,“message”:“Unauth… --- ## [Does Storing OAuth Tokens in Forge Remote DB Count as Storing Personal Data?](https://community.developer.atlassian.com/t/does-storing-oauth-tokens-in-forge-remote-db-count-as-storing-personal-data/101033)
**Author:** [@LiaTran](https://community.developer.atlassian.com/u/LiaTran)\ **Replies:** 2\ **Last updated:** [July 12, 2026, 8:17am UTC](https://community.developer.atlassian.com/t/does-storing-oauth-tokens-in-forge-remote-db-count-as-storing-personal-data/101033 "2026-07-12T08:17:44Z")
Hi guys, We have a question regarding our app’s privacy and security compliance. We are developing a Confluence Forge app that uses OAuth 2.0 to access data from a Jira site. Currently, we store the OAuth refresh token… --- ## [OAuth 3LO "failed to retrieve client" for non-contributors despite Sharing mode enabled](https://community.developer.atlassian.com/t/oauth-3lo-failed-to-retrieve-client-for-non-contributors-despite-sharing-mode-enabled/100834)
**Author:** [@BasdeVos](https://community.developer.atlassian.com/u/BasdeVos)\ **Replies:** 1\ **Last updated:** [July 6, 2026, 7:38am UTC](https://community.developer.atlassian.com/t/oauth-3lo-failed-to-retrieve-client-for-non-contributors-despite-sharing-mode-enabled/100834 "2026-07-06T07:38:26Z")
I have a private OAuth 2.0 (3LO) app registered in developer.atlassian.com. It’s a Flask web app that authenticates users against a Jira Cloud instance using the standard authorization code flow. The problem: Users who… --- ## [Forge Remote – Offline User Impersonation returns “No Atlassian OAuth token found for this user and extension” even after user interaction](https://community.developer.atlassian.com/t/forge-remote-offline-user-impersonation-returns-no-atlassian-oauth-token-found-for-this-user-and-extension-even-after-user-interaction/100499)
**Author:** [@JesterSimuelTabuada](https://community.developer.atlassian.com/u/JesterSimuelTabuada)\ **Replies:** 4\ **Last updated:** [June 16, 2026, 6:50pm UTC](https://community.developer.atlassian.com/t/forge-remote-offline-user-impersonation-returns-no-atlassian-oauth-token-found-for-this-user-and-extension-even-after-user-interaction/100499 "2026-06-16T18:50:34Z")
Hi everyone, I’m currently implementing Forge Remote with offline user impersonation, but I’m consistently hitting the following error: \*\*No Atlassian OAuth token found for this user and extension \*\* I’ve already fol… --- ## [Do I have to implement Personal Data Reporting in my OAuth2 app?](https://community.developer.atlassian.com/t/do-i-have-to-implement-personal-data-reporting-in-my-oauth2-app/54402)
**Author:** [@Dineshkumar](https://community.developer.atlassian.com/u/Dineshkumar)\ **Replies:** 14\ **Last updated:** [June 2, 2026, 5:22am UTC](https://community.developer.atlassian.com/t/do-i-have-to-implement-personal-data-reporting-in-my-oauth2-app/54402 "2026-06-02T05:22:31Z")
I’m working on a OAuth2 (3LO) app for jira. We don’t save any user data except ther accountId of the user along with refresh token & access token. In my console the below is said under “Distribution =\> Personal data dec… --- ## [OAuth consent failures with no specific error: Is it a platform issue?](https://community.developer.atlassian.com/t/oauth-consent-failures-with-no-specific-error-is-it-a-platform-issue/100687)
**Author:** [@LiaTran](https://community.developer.atlassian.com/u/LiaTran)\ **Replies:** 0\ **Last updated:** [May 13, 2026, 4:34am UTC](https://community.developer.atlassian.com/t/oauth-consent-failures-with-no-specific-error-is-it-a-platform-issue/100687 "2026-05-13T04:34:49Z")
Hi every one, I have a question regarding OAuth apps. Over the past few days, I’ve frequently encountered cases where the consent process fails without any specific error message. However, it succeeds immediately when I… --- ## [Failed to parse Connect Session Auth Token" error when integrating Tempo with Jira Forge](https://community.developer.atlassian.com/t/failed-to-parse-connect-session-auth-token-error-when-integrating-tempo-with-jira-forge/88008)
**Author:** [@KennethVenken](https://community.developer.atlassian.com/u/KennethVenken)\ **Replies:** 1\ **Last updated:** [May 5, 2026, 2:34pm UTC](https://community.developer.atlassian.com/t/failed-to-parse-connect-session-auth-token-error-when-integrating-tempo-with-jira-forge/88008 "2026-05-05T14:34:40Z")
I’m developing a custom Jira app using Forge and attempting to authenticate with Tempo using OAuth 2.0 credentials. However, I’m encountering the following error: Could not retrieve profile information: {“error”: “Fail… --- ## [OAuth 2.0 Integration with Tempo Timesheets API in Forge (Rovo Agent) - "Bad provider or missing config" Error](https://community.developer.atlassian.com/t/oauth-2-0-integration-with-tempo-timesheets-api-in-forge-rovo-agent-bad-provider-or-missing-config-error/96736)
**Author:** [@PedroHernandez](https://community.developer.atlassian.com/u/PedroHernandez)\ **Replies:** 1\ **Last updated:** [May 5, 2026, 11:11am UTC](https://community.developer.atlassian.com/t/oauth-2-0-integration-with-tempo-timesheets-api-in-forge-rovo-agent-bad-provider-or-missing-config-error/96736 "2026-05-05T11:11:57Z")
Hi there! I’m trying to integrate OAuth 2.0 authentication with Tempo Timesheets API in my Forge app (is a Rovo Agent that connects to Tempo Timesheets), but I’m getting a persistent error and would appreciate guidance … --- ## [Unable to use mcp tools](https://community.developer.atlassian.com/t/unable-to-use-mcp-tools/100508)
**Author:** [@ashishbhosale](https://community.developer.atlassian.com/u/ashishbhosale)\ **Replies:** 0\ **Last updated:** [May 1, 2026, 11:17am UTC](https://community.developer.atlassian.com/t/unable-to-use-mcp-tools/100508 "2026-05-01T11:17:38Z")
Hi, I’m integrating Atlassian Rovo MCP from a custom agent (not Cursor/Claude + mcp-remote). The MCP session authenticates with a short-lived OAuth 2.0 (3LO) access token sent as Authorization: Bearer \ to the Str… --- ## [Should we use Providers for non-IdP auth?](https://community.developer.atlassian.com/t/should-we-use-providers-for-non-idp-auth/100285)
**Author:** [@IL1](https://community.developer.atlassian.com/u/IL1)\ **Replies:** 0\ **Last updated:** [April 16, 2026, 10:55pm UTC](https://community.developer.atlassian.com/t/should-we-use-providers-for-non-idp-auth/100285 "2026-04-16T22:55:19Z")
This question is inspired by posts like this: and many others trying to make providers “fit” for particular OAuth2.0 problems with various workarounds. I don’t mean to put anyone on the spot— the Forge doco does tout … --- ## [Admin controls for OAuth2 apps](https://community.developer.atlassian.com/t/admin-controls-for-oauth2-apps/100090)
**Author:** [@AnkurSethi](https://community.developer.atlassian.com/u/AnkurSethi)\ **Replies:** 5\ **Last updated:** [April 9, 2026, 5:23pm UTC](https://community.developer.atlassian.com/t/admin-controls-for-oauth2-apps/100090 "2026-04-09T17:23:29Z")
Hi Team, I want to publish an OAuth2 app to allow users to give OAuth2 access token to us and then create, update, & retrieve Jira tickets based on their permissions. For enterprise users, we want them to have org/site… --- ## [Need to Identify Selected Cloud ID in OAuth 2.0 (3LO) Flow](https://community.developer.atlassian.com/t/need-to-identify-selected-cloud-id-in-oauth-2-0-3lo-flow/92066)
**Author:** [@AmitkumarSahu](https://community.developer.atlassian.com/u/AmitkumarSahu)\ **Replies:** 1\ **Last updated:** [March 27, 2026, 5:25am UTC](https://community.developer.atlassian.com/t/need-to-identify-selected-cloud-id-in-oauth-2-0-3lo-flow/92066 "2026-03-27T05:25:20Z")
I am integrating Jira Cloud using the OAuth 2.0 (3LO) authorization flow. During the consent screen, the user is asked to select a specific Jira site (cloud instance). However, after the access token is issued, when I ca… --- ## [Allow Confluence Forge app to fetch data from multiple Jira sites (not use cross-app)](https://community.developer.atlassian.com/t/allow-confluence-forge-app-to-fetch-data-from-multiple-jira-sites-not-use-cross-app/99724)
**Author:** [@LiaTran](https://community.developer.atlassian.com/u/LiaTran)\ **Replies:** 2\ **Last updated:** [March 23, 2026, 8:29am UTC](https://community.developer.atlassian.com/t/allow-confluence-forge-app-to-fetch-data-from-multiple-jira-sites-not-use-cross-app/99724 "2026-03-23T08:29:43Z")
Hi all, I’m looking for insights on how to fetch data from multiple Jira sites from Confluence app. Context I’m currently migrating a Confluence Connect app to Forge. One of our features allows the app to fetch and disp… --- ## [Is it possible to manage an OAuth 2.0 (3LO) app on more than one developer consoles](https://community.developer.atlassian.com/t/is-it-possible-to-manage-an-oauth-2-0-3lo-app-on-more-than-one-developer-consoles/75354)
**Author:** [@franz.hartmann](https://community.developer.atlassian.com/u/franz.hartmann)\ **Replies:** 3\ **Last updated:** [March 19, 2026, 6:55am UTC](https://community.developer.atlassian.com/t/is-it-possible-to-manage-an-oauth-2-0-3lo-app-on-more-than-one-developer-consoles/75354 "2026-03-19T06:55:16Z")
Hi Colleagues we have some OAuth 2.0 (3LO) apps. All that apps are managed by means of one Atlassian account (atlassian.id). Unfortunately we have to close the account. Is it possible to ‘share’ (transfer) the app to… --- ## [Getting Javascript is disabled while calling Authorize API](https://community.developer.atlassian.com/t/getting-javascript-is-disabled-while-calling-authorize-api/99708)
**Author:** [@KrishnaswamyRamachan](https://community.developer.atlassian.com/u/KrishnaswamyRamachan)\ **Replies:** 1\ **Last updated:** [March 18, 2026, 6:31pm UTC](https://community.developer.atlassian.com/t/getting-javascript-is-disabled-while-calling-authorize-api/99708 "2026-03-18T18:31:37Z")
We received OAuth credentials Client ID / Secret and are trying to get the Access Token. I was told to call Authorize API to get the Authorization Code and when I tried calling GET API Log in with Atlassian account with … --- ## [Forge's OAuth Integration Login is Unavailable (429)](https://community.developer.atlassian.com/t/forges-oauth-integration-login-is-unavailable-429/99656)
**Author:** [@MathieuLOISELLE](https://community.developer.atlassian.com/u/MathieuLOISELLE)\ **Replies:** 2\ **Last updated:** [March 17, 2026, 12:52pm UTC](https://community.developer.atlassian.com/t/forges-oauth-integration-login-is-unavailable-429/99656 "2026-03-17T12:52:21Z")
Hello, Yesterday when trying to access Atlassian’s 3LO authentication site (https://api.atlassian.com/oauth2/authorize/server/consent) we faced a few errors 429 but they went away quite rapidly Today however we have be… --- ## [OAuth rotating tokens: Unknown or invalid refresh token](https://community.developer.atlassian.com/t/oauth-rotating-tokens-unknown-or-invalid-refresh-token/54555)
**Author:** [@szn](https://community.developer.atlassian.com/u/szn)\ **Replies:** 8\ **Last updated:** [March 15, 2026, 7:53am UTC](https://community.developer.atlassian.com/t/oauth-rotating-tokens-unknown-or-invalid-refresh-token/54555 "2026-03-15T07:53:32Z")
Yet another post on that topic. But most of the existing posts describe early development phases. In my case, I successfully implemented both oAuth2 and newly introduce rotating refresh tokens. It was a painful process t… --- ## [OAuth2 token endpoint gives 400 Error](https://community.developer.atlassian.com/t/oauth2-token-endpoint-gives-400-error/99477)
**Author:** [@FulcherTim](https://community.developer.atlassian.com/u/FulcherTim)\ **Replies:** 1\ **Last updated:** [March 13, 2026, 3:03pm UTC](https://community.developer.atlassian.com/t/oauth2-token-endpoint-gives-400-error/99477 "2026-03-13T15:03:50Z")
I’m looking to build an integration with an MCP server. I’ve created my app in the developer area and the OAuth2 nearly works. After I authorise on the Atlassian page I’m redirected to my callback, which should do the co… --- ## [OAuth 2.0 and API authentication changes for Bitbucket Cloud](https://community.developer.atlassian.com/t/oauth-2-0-and-api-authentication-changes-for-bitbucket-cloud/99003)
**Author:** [@HamreetKaur](https://community.developer.atlassian.com/u/HamreetKaur)\ **Replies:** 0\ **Last updated:** [February 9, 2026, 10:05pm UTC](https://community.developer.atlassian.com/t/oauth-2-0-and-api-authentication-changes-for-bitbucket-cloud/99003 "2026-02-09T22:05:59Z")
In an effort to continue improving the security of Bitbucket Cloud, and to support long-term performance and scalability, we’re making a set of OAuth and token-authentication updates. These changes align our implementati… --- ## [How to get site id after Jira OAuth 2.0 callback?](https://community.developer.atlassian.com/t/how-to-get-site-id-after-jira-oauth-2-0-callback/79553)
**Author:** [@SeikyoCho](https://community.developer.atlassian.com/u/SeikyoCho)\ **Replies:** 1\ **Last updated:** [January 28, 2026, 8:37pm UTC](https://community.developer.atlassian.com/t/how-to-get-site-id-after-jira-oauth-2-0-callback/79553 "2026-01-28T20:37:31Z")
Use Jira OAuth 2.0, when redirect to https://api.atlassian.com/oauth2/authorize Select a site from Use app on dropdown list, got all sites from response data: const apiUrl = \`https://api.atlassian.com/oauth/token… --- ## [Get custom field contexts - not found returned](https://community.developer.atlassian.com/t/get-custom-field-contexts-not-found-returned/48408)
**Author:** [@JoelTurner](https://community.developer.atlassian.com/u/JoelTurner)\ **Replies:** 7\ **Last updated:** [January 28, 2026, 12:48pm UTC](https://community.developer.atlassian.com/t/get-custom-field-contexts-not-found-returned/48408 "2026-01-28T12:48:48Z")
Hi. I’m calling GET /rest/api/3/field/{fieldId}/context to get the context of a custom field. It works fine for global custom fields but as soon as I try and access the context of a custom field that has a scope for a … --- ## [Grant Access to OAuth 2.0 App or change ownership](https://community.developer.atlassian.com/t/grant-access-to-oauth-2-0-app-or-change-ownership/89131)
**Author:** [@IvannaHoroshko](https://community.developer.atlassian.com/u/IvannaHoroshko)\ **Replies:** 1\ **Last updated:** [January 28, 2026, 10:25am UTC](https://community.developer.atlassian.com/t/grant-access-to-oauth-2-0-app-or-change-ownership/89131 "2026-01-28T10:25:06Z")
Hi All, I need to set up an OAuth 2.0 (3LO) apps. What I have noticed - there is no way either to share it with my coworkers or transfer ownership (or I missed this in documentation). Is there a way to reassign app fro… [Next page](https://community.developer.atlassian.com/tag/oauth2/203.md?match_all_tags=true&page=1&tags%5B%5D=oauth2)