Re: Atlassian Connect OAuth Problem

439 views
Skip to first unread message

Rich Manalang

unread,
Aug 1, 2013, 12:25:16 AM8/1/13
to Lee, Inseok, atlassian-connect-dev
Hi Inseok. A lot of us on the atlassian-connect-dev list are also on the sf-ecosystem list. Please continue to use just the atlassian-connect-dev list for Connect related topics. I've moved the sf-ecosystem list to bcc.

To help you resolve your issue, please provide us the following:
  1. Are you using the atlassian-connect-express (formerly known as Feebs) or the atlassian-connect-play libraries?
  2. If so, which version are you using?
  3. Is it possible for you to share your code with us (Atlassian Connect devs)?
  4. What add-on modules are you implementing? Can you share your atlassian-plugin.xml?
  5. What product are you building a Connect add-on for... and what version are you developing against?
Atlassian Connect automatically creates and manages your application link registrations. You don't need to manually register or edit the the application links.

Also, unfortunately, we don't have anyone on our team who speaks Korean. I'm happy to get on Skype call with you to help you diagnose your issue if that helps.

Rich


On Wed, Jul 31, 2013 at 7:21 PM, Lee, Inseok <Inseo...@3dsystems.com> wrote:

Hi,

 

I am not certain what was wrong to enable OAuth at Atlassian Connet, but, Since there are some bugs at Atlassian Connect, and is still in beta, I’d like to know exactly what is problem and how fix it.

 

I asked to Atlassian Connect Dev Groups many times, but I can’t got good answers.

So, I attach all related files below, please check this.

 

 

 

 

1. consumer unknown problem

Var dump 1 : oauth_signature base_string – before make hash

POST&https%3A%2F%2Fgeomagicstesting.atlassian.net%2Fplugins%2Fservlet%2Foauth%2Frequest-token&oauth_consumer_key=jira:15916188&oauth_nonce=7168927509555913&oauth_signature_method=RSA-SHA1&oauth_timestamp=1375320929&oauth_version=1.0&oauth_callback=http://atlas-addon.rapidform.com/tpfiles/auth_callback&user_id=inseok.lee"

 

Var dump 2 : If I set oauth_consumer_key value from iframe(Atlassian Connect, which is above jira: 15916188, or tpfiles.geomagics.3dsystems), request-token returns like below

oauth_problem=consumer_key_unknown

 

 

 

 

 

So, I add a new Application Link, and set some Incoming Authentication like below, and use that values, then request-token API returns another error. It seems that there’s no consumer_unknown_error. I think, JIRA’s consumer key was wrong.

 

 

 

 

Var dump3 : parameters that sending to request-token. Below oauth_signature made from above oauth_signature_base_string. I make this string by openssl_sign function at PHP.

oauth_signature_method=RSA-SHA1&

oauth_consumer_key=api.tpfiles.geomagics.3dsystems&

oauth_nonce=7170474053689913&

oauth_version=1.0&

oauth_signature=XQShqasVOcB0vwuc50iZnWPBPa7v1jOsvz4c9aBB/ipzPNbmnHv4nHubLZUzYHtSWyU7wlLttbCIeJ0FEU/GCRJVh5Epo0RnjGeqZM5eVSIsIqChQDbdtgw6olS6v1IUQgMDIl1GM9RBgsfuMXasRfiJDq3jXtcEVJJbdZBtRvg=&

oauth_timestamp=1375322476&

user_id=inseok.lee&

callback=http://atlas-addon.rapidform.com/tpfiles/auth_callback

 

 

 

 

 

 

2. signature invalid

 

Var dump4 : request-token api returns like below. Oauth_problem is “signature_invalid”. What was wrong at my signature?

oauth_signature=XQShqasVOcB0vwuc50iZnWPBPa7v1jOsvz4c9aBB%2FipzPNbmnHv4nHubLZUzYHtSWyU7wlLttbCIeJ0FEU%2FGCRJVh5Epo0RnjGeqZM5eVSIsIqChQDbdtgw6olS6v1IUQgMDIl1GM9RBgsfuMXasRfiJDq3jXtcEVJJbdZBtRvg%3D&oauth_signature_base_string=POST%26https%253A%252F%252Fgeomagicstesting.atlassian.net%252Fplugins%252Fservlet%252Foauth%252Frequest-token%26callback%253Dhttp%25253A%25252F%25252Fatlas-addon.rapidform.com%25252Ftpfiles%25252Fauth_callback%2526oauth_consumer_key%253Dapi.tpfiles.geomagics.3dsystems%2526oauth_nonce%253D7170474053689913%2526oauth_signature_method%253DRSA-SHA1%2526oauth_timestamp%253D1375322476%2526oauth_version%253D1.0%2526user_id%253Dinseok.lee&oauth_problem=signature_invalid&oauth_signature_method=RSA-SHA1

 

 

 

3. And, when I add oauth, public-key element like below, can’t install add-on !!!

<?xml version="1.0"?>

<atlassian-plugin key="tpfiles.geomagics.3dsystems" name="Big File Uploader" plugins-version="2">

    <plugin-info>

        <description>JIRA add-on for uploading large file via Teamplatform, which is only available OnDemand JIRA Instance.</description>

        <version>1.0</version>

        <vendor name="3D Systems Korea" url="http://www.3dsystems.com"/>

    </plugin-info>

    <remote-plugin-container key="container" display-url="http://atlas-addon.rapidform.com">

             <oauth>

                         <public-key>

-----BEGIN PUBLIC KEY-----

MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmkc/pygEZn16/e3O1YLIImyCC

/LetFUL6cAfmhVHY3W2JklUGSJrdflfX3Ju74ICWpXXKXmUsvDQB4vYIs39kmCBv

zVlHBRs5GSSn6kCqWjYgnVxf7Igcf9tP4Uk92hBRC9QJ1xxEE116kQ0CJ8AtpbJ4

824Y8PaGYDU6aoAkpwIDAQAB

-----END PUBLIC KEY-----                                       

                         </public-key>

           </oauth>

</remote-plugin-container>

    <webhook key="installed" event="remote_plugin_installed" url="/hook-handler/installed" />

             <issue-panel-page key="tpuploader" name="Big File Uploader" url="/tpfiles/loader"></issue-panel-page>

</atlassian-plugin>

 

 

 

 

 

Here are some information.

 

Atlassian-plugin.xml – Current Uploaded

<?xml version="1.0"?>

<atlassian-plugin key="tpfiles.geomagics.3dsystems" name="Big File Uploader" plugins-version="2">

    <plugin-info>

        <description>JIRA add-on for uploading large file via Teamplatform, which is only available OnDemand JIRA Instance.</description>

        <version>1.0</version>

        <vendor name="3D Systems Korea" url="http://www.3dsystems.com"/>

    </plugin-info>

    <remote-plugin-container key="container" display-url="http://atlas-addon.rapidform.com">

</remote-plugin-container>

    <webhook key="installed" event="remote_plugin_installed" url="/hook-handler/installed" />

             <issue-panel-page key="tpuploader" name="Big File Uploader" url="/tpfiles/loader"></issue-panel-page>

</atlassian-plugin>

 

Public key

-----BEGIN PUBLIC KEY-----

MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmkc/pygEZn16/e3O1YLIImyCC

/LetFUL6cAfmhVHY3W2JklUGSJrdflfX3Ju74ICWpXXKXmUsvDQB4vYIs39kmCBv

zVlHBRs5GSSn6kCqWjYgnVxf7Igcf9tP4Uk92hBRC9QJ1xxEE116kQ0CJ8AtpbJ4

824Y8PaGYDU6aoAkpwIDAQAB

-----END PUBLIC KEY-----

 

Private key

-----BEGIN RSA PRIVATE KEY-----

MIICXgIBAAKBgQCmkc/pygEZn16/e3O1YLIImyCC/LetFUL6cAfmhVHY3W2JklUG

SJrdflfX3Ju74ICWpXXKXmUsvDQB4vYIs39kmCBvzVlHBRs5GSSn6kCqWjYgnVxf

7Igcf9tP4Uk92hBRC9QJ1xxEE116kQ0CJ8AtpbJ4824Y8PaGYDU6aoAkpwIDAQAB

AoGAEWUQzV1nGAHopx6BSuO6M+PfVU6G7/BUekrQyGYL0hXtpnw9nNZgNdlH2ycS

rGAZjaHh1yxcbHuLAtds0iPMnc2HGVYE983gKHv5h8//LejIjp79O5OIk/mPoSMn

Jar+OY7DX+ti3rDlMC69sunvSbsBg3iMIZx2N7WrGjesm+ECQQDYto9CMFv2/61c

X113qd6OxpxgpeeId3sqceUCnMUMZwAehEb0zdUH6m4Lz+plgUV8QgW3MOBiPQpJ

pAWm/zlrAkEAxMQj+v1PflL3dXnj5pUUNlJc529OBQzoeQlCquT/YaPCc6KzOGIb

HdtxhEVCkFcCHCa+kRawFPCwKQPRwsyktQJBANejcJFwBVKVvy83RY4Y3Xg8cMZK

z0Sff1MQ2cvrqrdYlmnHPcPCPMQPpUjjrl0qcLXgDEfovp2CF4aHS4iMVdkCQQCB

BU/GeyUN4x8qI8PBZY18VSNgCgbxntYsz1qsrj2a64NMyamU1heLy2Gy5qtP9A2J

IgqhHmxVPsF0E3IOtptlAkEAiK147ZBGxD/wKxywnWx8SCJuRqJQoTGYvbsP1zgm

hLCLp8cQ08EL/TA3ee5yWKrEhU0wW29AfT5HFy1VV/rnQw==

-----END RSA PRIVATE KEY-----

 

 

And, I attaching un-replied e-mail.

Furthermore, Can I get technical support in Korean?

 

 

 

Best Regards,

Inseok.

 

 

 

Inseok Lee | Software Engineer, Geomagic® Solutions
3D Systems Corporation | Infostorm Bldg. 525 Seolleung-ro Gangnam-gu Seoul 135-917| Korea
Tel: +82.2.3218.0523 | Fax: +82.2.6262.9999
Email:
Inseok.Lee@3DSystems.com | Web: www.Rapidform.com, www.3DSystems.com | NYSE: DDD

 

     image001

Create with Confidence

 

This e-mail is intended for the exclusive use of the recipients named above and may constitute privileged or confidential information or otherwise be protected from disclosure. Dissemination, distribution, forwarding or copying of this e-mail by anyone other than the intended recipients is prohibited. If you have received this e-mail in error, please notify me immediately by reply e-mail or telephone and completely delete or destroy any and all electronic or other copies of the original message and any attachments to it. Thank you.

 


image002.png
image001.png
Reply all
Reply to author
Forward
0 new messages