Hi Fathima,

Please find my comments inline.

On Tue, Mar 10, 2015 at 9:56 AM, Fathima Dilhasha <[email protected]> wrote:

> Hi,
>
> In order to allow OAuth access to an existing project we need to create an 
> *Application
> Link *for a JIRA instance, specifying AppFactory as a trusted consumer.
>
> To achieve above, JIRA requires a *consumer key and a public key*.
>
> Do these consumer key and public key need to be unique for each
> application?
> Or is it okay if I use the same consumer key and public key for all
> applications ?
>
> It's good to go with a single consumer key and public key, otherwise there
is a usability concern in configuring the issue tracker for AF. As you
mentioned use of this key combination is to tell jira that AF is a trusted
consumer and i don't see a need of having separate keys for apps.

I think it's better to use the same keys as these keys do not introduce any
> security issues by being common and having separate keys introduces
> redundancy.
>

+1

Your feedback on this is highly appreciated.
> Thanks.
>
> Regards,
> Dilhasha
>
>
> *M.N.F. Dilhasha*
> Software Engineering Intern | *WSO2 Lanka*
>
> email   :
> *[email protected] <[email protected]>*mobile : +94 77 8449321
>


Regards,
-- 
*Anuruddha Premalal*
Software Eng. | WSO2 Inc.
Mobile : +94710461070
Web site : www.regilandvalley.com
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to