mirror of
https://github.com/langgenius/dify-official-plugins.git
synced 2026-07-21 17:45:23 -04:00
PAT Token auth in Jira plugin #724
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @AlexeySumin on GitHub (Oct 16, 2025).
Self Checks
1. Is this request related to a challenge you're experiencing? Tell me about your story.
I am trying to set up and use Jira 0.0.1 plugin https://marketplace.dify.ai/plugins/langgenius/jira with my Jira Server installation.
But i am facing 403 error.
And i dont know if this a bug report or feature request.
2. Additional context or comments
There already was a ticket about this problem but author did not say anything after creating it: https://github.com/langgenius/dify-official-plugins/issues/1379
Dify version
1.7.0
Plugin version
jira 0.0.1
Cloud or Self Hosted
Self Hosted (Docker)
Steps to reproduce
In JIRA, generate a PAT token
In Dify, install the jira 0.0.1 plugin
Click on Authorization for the jira 0.0.1 plugin
Enter Authorization name, JIRA URL, Username, API Token
Receive 403 error
Same thing could be reproduced in pure python afrer copying code from here: https://github.com/langgenius/dify-official-plugins/blob/main/tools/jira/tools/list_project.py
There is a code:
We have a token variable, but pass it to to password parameter. Here goes 403.
But if we change this to
All goes OKay.
Resolution
I think, there should be some selector, that will change auth type from basic to token. And when we use token, it passes value to
tokenparameter instead ofpassword.3. Can you help us with this feature?
@dosubot[bot] commented on GitHub (Oct 16, 2025):
The Jira plugin currently passes the API token to the
passwordparameter, which causes a 403 error when using a PAT. There is no selector for authentication type, so PATs are not properly supported out of the box. You’re right that the plugin should allow you to choose between basic and token authentication, and pass the PAT to thetokenparameter instead.A similar issue was fixed in the Confluence plugin by adding a
token_typeselector to the UI and backend, letting users choose between Basic and Bearer (PAT) authentication modes. Adopting this approach for the Jira plugin would resolve the problem and support both authentication methods.For now, a workaround is to modify the plugin code to use the
tokenparameter when authenticating with a PAT, as you described. If you’re interested in contributing, implementing a selector like the one in the Confluence plugin would be a solid solution.Reference: Confluence plugin PR with token_type selector
To reply, just mention @dosu.
How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other

@AlexeySumin commented on GitHub (Oct 16, 2025):
Problem was not there. My system user was marked as "need to enter captcha". After i reactivated him problem gone.