401 Unauthorized Jira and Sonar

[camillarizzo]

Hi Daniel,

This is not an issue, more of a question.

I'm trying to use the Dashboard, but I'm having issues with authentications. I did all the described steps, and looked at the old issues, but still unsuccessfully. I'm trying to use it in the dev environment for now, and on Jira and Sonar I only get 401 on the requests. But when I put the URL directly into the browser, I'm getting the API return correctly. Can you help me with this problem?

[marco-streng]

Hi @camillarizzo,

did you check your credentials in the .env and use them in the auth.js?

Maybe you get an API response in the browser because your are still logged in? (check the URL in incognito mode)

See https://github.com/danielbayerlein/dashboard#authentication for more informations.

[danielbayerlein]

Post from @camillarizzo:

Hi @marco-streng, I've done exactly the same steps, but in all widgets I get a response like this:

Request URL: http://127.0.0.1:3001/?url=https://xxxx.atlassian.net/rest/agile/1.0/board/149/sprint?state=active Request Method: GET Status Code: 401 Unauthorized Remote Address: 127.0.0.1:3001 Referrer Policy: no-referrer-when-downgrade access-control-allow-origin: http://localhost:3000 access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache Connection: keep-alive content-encoding: gzip content-type: application/json; charset=utf-8 Date: Tue, 11 Jun 2019 19:30:31 GMT Transfer-Encoding: chunked vary: origin,accept-encoding Provisional headers are shown Authorization: Basic xxxx Origin: http://localhost:3000 Referer: http://localhost:3000/

⚠️ @camillarizzo Please update your password! You have inadvertently posted your access data.

[danielbayerlein]

@marco-streng Basic authentication with Jira is deprecated since June 3rd, 2019 See https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-basic-auth-and-cookie-based-auth/

For the following APIs and pages, all requests using basic authentication with a non-API token credential will return 401 ( Unauthorized) after the deprecation period

[danielbayerlein]

We should replace the basic auth with the api token, see https://confluence.atlassian.com/cloud/api-tokens-938839638.html

[S33G]

I've created a example .env file. It would be good to have a way of providing JIRA_KEY in this env file :) #132