request /wiki/rest/api/group return 401 response for the OAuth 2.0 (3LO) for apps
Asked by nemiro_viktor:

Could you help me please? How i can to get the list of groups, if i use the OAuth 2.0 (3LO) for apps authentication?

1. I created the new application.![s1.png](/t5/image/serverpage/image-id/97243i05276E7D09191029/image-size/large?v=v2&px=999 "s1.png")
2. Got the code . I used the GET request:   
   [https://auth.atlassian.com/authorize?audience=api.atlassian.com\&client_id={](https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent "https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent")[client](https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent "https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent")[Id}\&scope=read%3Ame offline_access read%3Aconfluence-content.summary write%3Aconfluence-content read%3Aconfluence-space.summary write%3Aconfluence-space write%3Aconfluence-file read%3Aconfluence-props write%3Aconfluence-props manage%3Aconfluence-configuration read%3Aconfluence-content.all search%3Aconfluence\&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback\&state=${YOUR_USER_BOUND_VALUE}\&response_type=code\&prompt=consent](https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent "https://auth.atlassian.com/authorize?audience=api.atlassian.com&client_id=pN7Z7kBJZUMzHmoXnNRDP1Ev2BMkYlre&scope=read%3Ame%20offline_access%20read%3Aconfluence-content.summary%20write%3Aconfluence-content%20read%3Aconfluence-space.summary%20write%3Aconfluence-space%20write%3Aconfluence-file%20read%3Aconfluence-props%20write%3Aconfluence-props%20manage%3Aconfluence-configuration%20read%3Aconfluence-content.all%20search%3Aconfluence&redirect_uri=https%3A%2F%2Fnemirositetest%2Fcallback&state=$%7BYOUR_USER_BOUND_VALUE%7D&response_type=code&prompt=consent")  
3. Then got the access_token used the POST request:![s3.png](/t5/image/serverpage/image-id/97244i65A52F6CAFE5E420/image-size/large?v=v2&px=999 "s3.png")
4. Then i got the confluence site id ![s4.png](/t5/image/serverpage/image-id/97245i91DBBD58AA328D89/image-size/large?v=v2&px=999 "s4.png")
5. Then i tried to execute the [https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get](https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get "https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get")
6. request, but got the response with 401 code ![s5.png](/t5/image/serverpage/image-id/97246iD18FFED8889BBB2B/image-size/large?v=v2&px=999 "s5.png")

**PS:**   
1. The request ([https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get](https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get "https://developer.atlassian.com/cloud/confluence/rest/#api-api-group-get")) works fine if i use the basic authentication.

<br />

2. And Yes. My user has access to the groups  

![s6.png](/t5/image/serverpage/image-id/97247i98468BD50A03192A/image-size/large?v=v2&px=999 "s6.png")


Answers:
author: Dario B
body: Hello [@nemiro_viktor](/t5/user/viewprofilepage/user-id/3948314) ,

Welcome to the Atlassian Community.

As you can see, no OAUTH Scope is documented for the group endpoint. This actually means that the endpoint does not support Oauth 2 (3LO) yet.

I have just spoken to DEV and I have been told that they are already working to re-write the group endpoints to add the possibility to:

* Create/Delete/Update Group
* Added/Remove members to/From a Group
* Use 3LO auth

You can vote and set yourself as a watcher to below Feature Request so that you will be notified in case of any progress:

* [\[CONFCLOUD-66317\] Missing Group Rest API methods in Confluence](https://jira.atlassian.com/browse/CONFCLOUD-66317)

I hope this clarifies.

Cheers,  
Dario


Tags: cloud