1. We are developing mobile app that should simplify user access to our Confluence server.
2. Our expectation is that, user will need to enter credentials once a week.
3. According to recommendations were implemented OAuth1.0 flow (https://developer.atlassian.com/server/jira/platform/oauth/ ).
4. On the client side we uses WebView to display received page.
Problem:
We see that created session is not associated with active Confluence session fully. As result WebView requests to page resources cause unauthorized issue, so we are not able to load page and redirected to login page provided by IDP.
We tried to manual loading of resources on each WebView request, but faced performance and UI issues related to such solution.
Could you please help us to setup Confluence server in the way that allow us:
Use token with lifetime about a week;
Use session functionality for loading data within hour/hours/day.
Planned behavior:
1. User passed authentication. Mobile app get Access token as result and store it;
2. User starts the mobile app before token expiration. Mobile app generate authorization data and start loading page with WebView;
3. WebView receives session information in response of first request and uses it for future requests of page content/resources.
I would try posting this in the Atlassian Developers Community. Hopefully you get a better response: https://community.developer.atlassian.com/
Good Luck
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.