php-oauth icon indicating copy to clipboard operation
php-oauth copied to clipboard

Signing requests for Jira

Open rjakes opened this issue 10 years ago • 2 comments

Jira requires that all requests be signed via RSA-SHA1.

Are there any examples that use RSA-SHA1 signed requests that I can look at?

rjakes avatar Jun 01 '15 18:06 rjakes

Please provide a technical details for term "signed requests" in http request context. Do you mean hash in request body/header?

logical-and avatar Jun 12 '15 20:06 logical-and

I originally thought that only subsequent request, after authentication, needed to be signed. Later I learned that the authentication request also needs to be signed by private key.

The Jira documentation directs you to a tutorial, which used Java libraries, so that may not be super helpful: https://developer.atlassian.com/jiradev/api-reference/jira-rest-apis/jira-rest-api-tutorials/jira-rest-api-example-oauth-authentication.

Here is an example that uses Zend_Crytp_Rsa https://www.prodpad.com/2013/05/tech-tutorial-oauth-in-jira/

Here is one that uses Guzzle: https://github.com/alexzv/jira-restapi-client/blob/master/src/Jira/Api/Authentication/Oauth.php

rjakes avatar Jun 12 '15 20:06 rjakes