Jira server internal rest calls throw https 401 Unauthorized errors

[Chris Schulte]

I have jira installed on a server that is behind a reverse proxy https server. I have confluence running on another server running behind another reverse https proxy. Both applications are running on centos 7 with adoptopenjdk 11.0.6.

My daily jira logwatch shows a lot of errors, especially 401 errors, under /rest:

400 Bad Request
/cgi-bin/mainfunction.cgi?action=login&key ... er=a&loginPwd=a: 1 Time(s)
/servicedesk/customer/portal/1/create/15: 1 Time(s)
null: 1 Time(s)
401 Unauthorized
/rest/gadget/1.0/currentUser?_=1586345865361: 2 Time(s)
/secure/AjaxIssueEditAction!default.jspa?d ... _=1586376225478: 2 Time(s)
/rest/applinks/latest/applicationlink/1689 ... cation/provider: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586350725161: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586350789190: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586351443435: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586358185708: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586358386609: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586367606199: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586367685228: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586367695916: 1 Time(s)
/rest/gadget/1.0/currentUser?_=1586369685083: 1 Time(s)
404 Not Found
/js/jquery.min.js: 17 Time(s)
/rest/api/2/mypreferences?key=hipchat.inap ... _=1586370504619: 1 Time(s)
/rest/api/2/mypreferences?key=hipchat.inap ... _=1586380722289: 1 Time(s)
408 Request Timeout
null: 7 Time(s)
415 Unsupported Media Type
/rest/webResources/1.0/resources: 18 Time(s)

I don't explicitly call rest so these are not immediately noticeable when we use the applications. It is something internal to jira and we think they might be associated with performance issues.

I've noticed that the permissions in /var/atlassian/application-data/jira are drwx------ with a few drwxr-x---. Would that have anything to do with this? What else is there to look at?

Other responses I've seen to the Jira 401 errors seem to be associated with Jira "https://<domain>.atlassian.net/rest/api..." and tokens, but I don't know how you would set tokens in the server setting.

Any suggestions?

Thanks,

Chris