Skip to content

Support granular API tokens in Jira integration #10092

@michelle-luana

Description

@michelle-luana

Prerequisites

  • I have searched open and closed issues to make sure it isn't already requested
  • My team has started working on this issue
  • I have written a descriptive issue title

Summary

The current Jira integration only supports the legacy authentication approach, which requires a dedicated Jira user with broad permissions and uses the instance-direct URL (https://.atlassian.net). We need to add support for Jira's newer granular API tokens, which use a different base endpoint.

Background

Jira's granular (OAuth 2.0) API tokens route requests through:
https://api.atlassian.com/ex/jira/<cloudId>
rather than the instance-direct URL the integration currently uses. These two authentication approaches are not interchangeable — the endpoint itself is different, so supporting the new token type requires handling both URL patterns.

Problem

Customers who want to use granular API tokens (which allow scoped, least-privilege access) are currently blocked. To use the integration at all, they're forced to:

Create a dedicated "dummy" Jira user
Grant it broad/full access to work around the limitations of the legacy token approach

Requested change

Update the Jira integration to support granular API tokens by:

Accepting a Cloud ID (or deriving it automatically) when a user configures the integration
Routing API calls through https://api.atlassian.com/ex/jira/ when a granular token is provided
Ideally, allowing users to choose between legacy and granular token modes in the integration config UI

Metadata

Metadata

Labels

kind/enhancementThis issue represents an enhancement we are committed to adding to Octopus as some time

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions