Confluence Oauth Authentication
Asked by Mesut Muhammet ?ahin:

Hi;

I looked confluence doc. for oauth in that link [https://developer.atlassian.com/display/CONFDEV/Confluence+JSON-RPC+APIs](https://developer.atlassian.com/display/CONFDEV/Confluence+JSON-RPC+APIs "Follow link") and [https://developer.atlassian.com/display/CONFDEV/Confluence+REST+APIs+-+Prototype+Only](https://developer.atlassian.com/display/CONFDEV/Confluence+REST+APIs+-+Prototype+Only "Follow link") .it seems we can connect confluence with oauth take accestoken . But there is no example and doc. not explain good. I want create tokens and connect confluence with that. Can ? take information oauth for XML-RPC and SOAP APIs or JSON-RPC APIs. How can ? create tokens and connect my confluence? For example for jira: [https://developer.atlassian.com/display/JIRADEV/JIRA+REST+API+Example+-+OAuth+authentication](https://developer.atlassian.com/display/JIRADEV/JIRA+REST+API+Example+-+OAuth+authentication "Follow link"). I want like that.


Answers:
author: John Tolle
body: Additionally, it matters how you send the OAuth requests.

For the entire token-based OAuth dance, be sure to send the OAuth fields in the POST, not the HEADER or in the Query String.

To GET/POST/PUT pages, etc., always send the OAuth fields in the Query String and NOT in the POST.

Again, these kinds of things should really be documented, but they are most definitely not!

comments: author: Bernhard Millauer
body: Thank you John, thank you so much! I wasted hours figuring out why the \*\*\*\* my token get rejected all the time.

For anyone who has the same problem:  
JIRA needs the oauth signature properties in the HEADER, Confluence (same company...) in the GET/POST as described.


author: John Tolle
body: For anyone still looking for an answer, Ken has the right idea with his example above. The base URL for OAuth for Confluence appears to be as follows:

<https://yourinstance.jira.com/wiki/plugins/servlet/oauth/>

And the endpoints are the same as JIRA:

request-token

authorize

request-token

While all of the other information about how to use OAuth is exactly as documented for JIRA, I still cannot find the official documentation on the Confluence base URL and endpoints.


author: John Tolle
body: I've created an example for using OAuth with Confluence in PHP here:

<https://github.com/jt-github/atlassianapi>

or, if you prefer Bitbucket (and hey, we're on an Atlassian site, right?):

<https://bitbucket.org/johntolle/atlassian-oauth-confluence-php-example/src/2f15a6e970d23c8a3d7524c6173abb5ecf09b956/php-confluence/?at=default>


author: Ken Lassesen
body: I have OAuth1.0a code written for Confluence but like above, I cannot locate the URL that I should be calling.

See <https://jira.atlassian.com/browse/CONF-39916> for what seems to be related.

Using an OAuth1.0a library

client = new OAuthRequest  
{  
Method = "GET",  
Type = OAuthRequestType.RequestToken,  
SignatureMethod = OAuthSignatureMethod.HmacSha1,  
ConsumerKey = String.Format("{0}@[avalara.com](http://avalara.com)", REDACTED),  
ConsumerSecret =REDACTED  
RequestUrl = "<https://avalara.atlassian.net/wiki/plugins/servlet/oauth/request-token>",  
Version = "1.0a",  
Realm = "[avalara.com](http://avalara.com)"  
};

I get null for the token,

* is the URL right?
* is the realm right?
* is the signature method correct?


author: Mark Mackay
body: Hi Mesut -

I think I tried something similar to you a while back (Previous discussion here -- [](/questions/63827/login-to-confluence-web-interface-using-token-from-soap-api-sso-without-crowd)<https://answers.atlassian.com/questions/63827/login-to-confluence-web-interface-using-token-from-soap-api-sso-without-crowd>)

I finally got arount to trying Joseph's suggestion in this thread, and it did the trick. And I've published the code hacks here:

* <https://github.com/mcackay/confluence-helpers>.

Hope that helps at least point you in another possible direction.

/Mark


author: Mesut ?ahin
body: Can you explain with an example how can ? connect with conflence. I use jirashell for jira API. And I use that code : <https://jira-python.readthedocs.org/en/latest/#oauth> . I want to connect with accesstoken to confluence and make something. for example edit a page with access token. Have you any example? it can be any programming language. I want like that <https://confluence.atlassian.com/display/DISC/XML-RPC+Page+Updater+Example> but this is XML-RPC


author: Joe Clark
body: This examples for JIRA should would work the same with Confluence.

comments: author: Brett Profitt
body: It doesn't. The authorize URL doesn't work in Confluence.


author: Mesut Muhammet ?ahin
body: Does not anyone use confluence oauth? I want to enter with access tokens to confluence. How can I do that?


Tags: oauth