infoannouncementAtlassian calls it: Announcement
Resource-Restricted Tokens for OAuth 2.0 (3LO) Apps
- Announced
- Tags
- oauth-2-3lo
- Severity
- info, set by
reef/atlassian-rule-v2 - Source
- https://developer.atlassian.com/changelog/#CHANGE-3304
Resource-restricted tokens are now available for all developers creating new 3LO apps.
When creating a new OAuth 2.0 (3LO) app via the Developer Console, you can now opt in to resource-restricted tokens. This ensures that access tokens issued for your app are scoped to only the specific Atlassian site a user explicitly selects during consent rather than granting broad access across all sites.
More details
The onboarding guide for Resource restricted apps is available here: https://developer.atlassian.com/cloud/jira/platform/oauth-2-3lo-apps/#oauth-2.0-(3lo)-apps
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.