Different authentication process among JIRA SDK and Standalone? (REST API)

[Kinto Soft]

Hi,

The same client application works different depending on whether it runs against the JIRA SDK or a JIRA Standalone instance.

1. SDK:

REST login for X username -> get session cookie -> REST call any other method Y -> session cookie re-sent -> Y works for username X.

2. Standalone:

REST login for username X -> get session cookie for anonymous?? -> REST call any other method Y -> session cookie re-sent -> Y fails: OAuth realm authentication failed!!

----------------

Why?

Pablo.

[Nic Brough -Adaptavist- · Accepted solution]

What is your client doing differently? I've not used the REST interface as much as I'd like yet, but the application I've got behaves exactly the same on both an SDK session and a standalone install.

I'd say the problem is on the "standalone" call though because it looks like it's not sending a valid user id to the standalone Jira (and hence authentication fails later in the process).

[Kinto Soft]

Yes, it was not a valid user id problem but related to cookies. I've realized that the client app is changing the session cookie between the calls, so JIRA works fine.

REST login-> gets cookie 1-> something bad happens -> sends cookie 2-> REST call returns 401 (unauthorized).

Sorry for this waste of time. It looked more interesting and finally is not related to JIRA.

Thanks and a lot of karma ;)

Pablo.