Как работает авторизация JIRA?

{
  "key": "my-jira-app",
  "name": "My App",
  "description": "Mydescription",
  "vendor": {
    "name": "Myapp",
    "url": "http://www.myapp.com"
  },
  "baseUrl": "https://myapp.localhost.run",
  "authentication": {
    "type": "jwt"
  },
  "enableLicensing": false,
  "lifecycle": {
    "installed": "/installed"
  },
  "modules": {},
  "scopes": ["READ", "WRITE"]
}

{ key: 'my-jira-app',
  clientKey: '***',
  publicKey: '***'',
  sharedSecret: '***',
  serverVersion: '100105',
  pluginsVersion: '1.435.0',
  baseUrl: 'https://***.atlassian.net',
  productType: 'jira',
  description: 'Atlassian JIRA at https://***.atlassian.net ',
  eventType: 'installed' }

const rq = atlassianJwt.fromMethodAndUrl(req.body.method, req.body.url);

  const tokenData = {
    "exp": now.add(3, 'minutes').unix(), 
    "iss": '<client-id>',
    "qsh": atlassianJwt.createQueryStringHash(rq), 
    "iat": now.unix(),
  };

  const secret = '***';

  const token = atlassianJwt.encode(tokenData, secret);

  res.json(token);