Logout of JIRA with REST API or URL

[Wesley Tseng]

I'm currently working on an external application that uses G Suite credentials to sign into the application and into JIRA. I'm using OAuth 3LO to authorize JIRA and I'm able to sign in without any issues.

The issue right now is that if I sign out of the external application, I also sign out of the G Suite account without any issues. However, the JIRA account remains signed in. This can lead to issues when someone else might use another G Suite account to sign in but ending up signing into the same JIRA account. 

To clarify, User A signs into the application with their G Suite account. User A is now signed into Google and into JIRA. User A then signs out of the application, signing out of Google in the process. User B signs into the application with their G Suite account. User B is now signed into Google with their account BUT with User A's JIRA account.

I was wondering if there is an REST API or logout URL that I can utilize to have the user sign out of JIRA when they sign out of their application / Google as well? 

We're utilizing the JIRA Cloud platform and primarily dealing with JIRA Service Desk.

[sreuter]

Hi @Wesley Tseng

is this a native app we're talking about? 3LO is not bound to user sessions, so there's usually not really a need to login or logout the Jira user. We don't allow 3rd parties to log people out of their general Jira session. You can use our logout url (https://id.atlassian.com/account/logout), but the user always needs to confirm things for security reasons.

If you're using a Desktop app built with Electron or a Mobile app, you should be able to clear your session/cookie store tho.

Hope this makes sense.

Cheers,

Sascha

[Wesley Tseng]

Hello @sreuter

I am referring to a web app. I currently have the user redirect to the logout URL that you mentioned but I was hoping for a way to not have to have the user confirm the log out. Using a web app, I don't think it'd be possible to delete the cookies of a site outside of its domain.