CORS issue when calling JIRA "/status" endpoint

[Guillaume Dupin]

We have confluence and JIRA hosted in our own AWS account.
In a confluence page, I am trying to fetch JIRA status but I face a CORS issue in the request.
although my confluence domain has been added to the JIRA whitelist.

I saw that the JIRA REST API supported CORS but what about the "/status" endpoint ?

[Sam Hall]

Are you using 

HTTP://<node_IP_address>:<port>/status

As mentioned in https://confluence.atlassian.com/enterprise/load-balancer-configuration-options-935383760.html

[Sam Hall]

Oh - you want to display the result of <jira>/status in a Confluence page?

Which Confluence macro are you using?

[Guillaume Dupin]

Yes indeed, the goal is to display the JIRA status in a confluence page thanks to the ‘HTTP Response Json value’ Macro

[Guillaume Dupin]

I suspect this issue to come from the missing CORS HTTP headers ("access-control-allow...") in JIRA response as mentionned here : https://jira.atlassian.com/browse/JRASERVER-59101
This fix was apparently done for multiple API endpoints that are listed to support CORS, but the "/status" endpoint is missing from the list.

Could it be the cause ?

[Guillaume Dupin]

Here is the debug view :

[Sam Hall]

I'm not sure which add-on gives you the HTTP Response Json Value macro, but one thing to note is that the /status endpoint doesn't require HTTPS

What happens if you try http://JIRA_URL/status (rather than https://JIRA_URL/status) ?