Unable to create new issues after upgrading to Jira 7
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
The content on this page relates to platforms which are not supported. Consequently, Atlassian Support cannot guarantee providing any support for it. Please be aware that this material is provided for your information only and using it is done so at your own risk.
Problem
Users are unable to create any issue, when the "Create" issue button is clicked the browser returns below error:
Diagnosis
Diagnostic Steps
Issue happens after upgrading to JIRA 7
JIRA instance behind a reverse proxy
atlassian-jira.log is throwing below XSRF check errors
1
2016-03-24 11:41:39,639 http-nio-8080-exec-9 WARN username 701x48328x3 1sx07jj 10.50.8.252,127.0.0.1 /rest/webResources/1.0/resources [c.a.p.r.c.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: http://jiradev.domain.com/rest/webResources/1.0/resources , origin: null , referrer: https://jiradev.domain.com/secure/Dashboard.jspa , credentials in request: true , allowed via CORS: falseCause
Tomcat is not "aware" of the reverse proxy due to "proxyName" and "proxyPort" are not specified in the connector in server.xml. As a result the browser request is blocked, due to REST API not receiving the expected hostname/port from the origin header value.
Further reading: Cross Site Request Forgery (CSRF) protection changes in Atlassian Rest
Solution
Resolution
Specify the proxyName and proxyPort parameters in server.xml, for example:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
<Connector port="8080"
maxThreads="150"
minSpareThreads="25"
connectionTimeout="20000"
enableLookups="false"
maxHttpHeaderSize="8192"
protocol="HTTP/1.1"
useBodyEncodingForURI="true"
redirectPort="8443"
acceptCount="100"
disableUploadTimeout="true"
proxyName="jiradev.domain.com"
proxyPort="443"
scheme="https"/>In this example, jiradev.domain.com would be the URL that users use to access JIRA through the proxy.
Was this helpful?