Application Link Issue! Please HELP !!!!
Asked by Farhad:

Dear All

I have Jira and Confluence behind nginx as reverse proxy.

but when i want create application link between them i face with attachment error !

i know this error related to my reverse proxy!

my nginx config is :

server {  
listen 80;  
server_name _;  
return 301 <https://IP-ADDRESS>;  
}

server {  
listen 443 ssl;  
server_name _;  
disable_symlinks off;  
ssl_session_cache shared:SSL:50m;  
ssl on;  
ssl_certificate /home/tefas/crt/30f0eee4d557965f1db60af2ab44f381.pem;  
ssl_certificate_key /home/tefas/crt/30f0eee4d557965f1db60af2ab44f381.pem;  
proxy_redirect off;  
proxy_buffering off;

location /jira/ {  
proxy_pass <http://10.35.32.63:8081/jira/>;  
proxy_set_header X-Forwarded-Host $host;  
proxy_set_header X-Forwarded-Server $host;  
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  
proxy_set_header Authorization "";  
client_max_body_size 250M;  
}

location /confluence/ {  
proxy_pass <http://10.35.32.64:8090/confluence/>;  
proxy_set_header X-Forwarded-Host $host;  
proxy_set_header X-Forwarded-Server $host;  
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  
client_max_body_size 250M;  
proxy_set_header Authorization "";  
}

1. ![Oauth Problem.png](/t5/image/serverpage/image-id/328766i62972C7CEEFF0544/image-size/large?v=v2&px=999 "Oauth Problem.png")**what wrong with this config ?? (my jira and confluence are both working fine behind reverse proxy this issue only for application link between them)**


Answers:
author: Rilwan Ahmed
body: Dear [@Farhad](/t5/user/viewprofilepage/user-id/5154009) ,

1. Delete existing application links in both Jira and Confluence (Some times it takes time to reflect the changes after you hit the delete, so wait for atleast 10 minutes).
2. Create application link from Jira to confluence **OR** confluence to Jira.
3. If issue still exists, check for [Application link version matrix](https://confluence.atlassian.com/applinks/application-links-version-matrix-779174762.html) and make sure your Jira and Confluence versions are compatible
4. You can also refer to [Application links troubleshooting](https://confluence.atlassian.com/kb/application-links-troubleshooting-guide-718668765.html) article for more details.

comments: author: Farhad
body: [@Rilwan Ahmed](/t5/user/viewprofilepage/user-id/716861)

thanks for your respond.

i recreate application link and check both atlassian troubleshooting link but my problem still persist !!

this issue related to my reverse proxy that not create access token from jira to confluence and confluence to jira !! i added jira in confluence allow list and confluence to jira allow list and everything is fine! but i think reverse proxy doesn't allow call_back oauth request. ![allowlist.png](https://community.atlassian.com/t5/image/serverpage/image-id/328767iF5EA7D86E698C76B/image-size/large?v=v2&px=999 "allowlist.png")


author: Rilwan Ahmed
body: Hi [@Farhad](/t5/user/viewprofilepage/user-id/5154009) ,

You need to create application link from Admin settings --\> Applications --\> Application link  
Direct url: https://\<jirabaseURL\>/jira/plugins/servlet/applinks/listApplicationLinks  


author: Farhad
body: [@Rilwan Ahmed](/t5/user/viewprofilepage/user-id/716861)

i cant use <https://reverse-proxy-ip/jira> in application link !! i faced with can't connect to url error !! ( jira base url is reverse proxy ip / jira )

i only use internal jira ip with connector port and /jira context in application link , then application link API says : convert this url to reverse proxy , everything work fine , but when link is created i face with network error and after click on error i face with authentication faild , OAuth signature invalid !!!


author: Rilwan Ahmed
body: Hi [@Farhad](/t5/user/viewprofilepage/user-id/5154009) ,

1. Ensure the Base URL is correct for two applications.
2. Check this article for the solution  
   <https://confluence.atlassian.com/kb/oauth-error-oauth_problem-signature_invalid-720406720.html>
3. Please go through each links in [Application links troubleshooting](https://confluence.atlassian.com/kb/application-links-troubleshooting-guide-718668765.html) and see for resolutions.

Also get in touch with your network team to see if the systems are in same network and has any connectivity issue.

Please share the application link configuration page screenshot from both the applications here.


author: Farhad
body: [@Rilwan Ahmed](/t5/user/viewprofilepage/user-id/716861)

Dear Rilwan , i check and read all atlassian article for my problem !

jira and confluence base url both correct and i access to them by reverse proxy address

Jira : <https://reverse-proxy-ip/jira>

confluence : <https://reverse-proxy-ip/confluence>

but for application link when i use above url , i faced with url not accessible !!

i must used internal jira (confluence) ip address with connector port for connection establish. but after that in application link status i face with network error that say possible your server behind misconfigured reverse proxy!! (my nginx reverse proxy config has been available in post 1) and when i want access to jira frrom confluence i face with error OAuth Authentication failed !! (attachment picture 1 ) , i think this issue related to my reverse proxy config !!


author: Stefan Stadler
body: Hi Farhad,

I can confirm that accessing Jira or Confluence behind a reverse proxy is working quite good for application linking. That is what we do as well. And we can configure the reverse proxy IP directly to be used in the application link page. It think the problem is that the reverse proxy is not setup correctly and using the application link without the reverse proxy is causing this to be HTTP instead of HTTPS. Not sure if this is supported at all, but never checked.

Furthermore, I suspect your Jira and Confluence being setup using the reverse proxy URL as the base URL. That means you are trying to do the application linking with a different URL (direct URL with port) compared to the base URL, which WILL lead to issues.

I also had issues with the application linking when both instances were using self signed SSL certificates and did not add them to the truststore.

It might help to think about checking this page for setting the certificate up correctly:

[Connecting to SSL services \| Administering Jira applications Data Center 9.16 \| Atlassian Documentation](https://confluence.atlassian.com/adminjiraserver/connecting-to-ssl-services-938847763.html)

That way, you can use the reverse proxy as it is intended.

Hope this helps!

Stefan


Tags: application-link

confluence

data-center

jira-data-center

jira-server

network

nginx

oauth

reverse-proxy

server