Does Jira Server require the REST API for normal functionality?

[Olubunmi Ogunsan]

I'm trying to completely block access to the JIRA REST API using a reverse proxy server and would like to find out what impact that might have on the normal functionality of JIRA.  I'm blocking the API at /rest/api/2 and would like to know how this would affect JIRA Server.

Secondly, does JIRA Server allow anonymous access to /rest/api/1.0?  If yes, can one get a list of the resources that can be accessed in this way?

Thanks.

[Nic Brough -Adaptavist-]

Yes.  Dashboards and boards use REST to get some of their data.  If the REST api is unavailable, large swathes of Jira will not work.

You need to stop blocking REST, it is going to break it for you.

Yes, you can access it anonymously, in full.  What it returns is limited to what anonymous users can see in the UI.

[Olubunmi Ogunsan]

Thanks Nic.  I noticed in my tests that JIRA itself uses /rest/api/1.0 for its normal functionality. It also uses /rest/analytics, /rest/plugings, /rest/troubleshooting, etc. I've not gotten any issues with blocking /rest/api/2 but you're right, I can't completely block the REST API.