Authentication for Apps

YouTrack runs the scripts contained in an app package within its own JavaScript runtime. This means you don't need to provide any extra authentication details in your scripts.

To upload an app to YouTrack and attach it to a project, you must have the global Update Project permission. To learn more about permissions in YouTrack, see Permissions.

Widget scripts that use the Host API are authenticated by YouTrack as the current user. For example, requests sent with host.fetchYouTrack() use the user's YouTrack session and don't require an authorization header in the widget code.

If you send requests to the YouTrack REST API or the Hub REST API outside the Host API, follow the authentication guidelines for these APIs. For details, see YouTrack REST API, Hub REST API, and Users, Groups, and Access Management.