Altinn / Altinn/app-lib-dotnet
Complete confirming an instance in Localtest gives Forbidden response
- Dominant language
- C#
- Stars
- 8
- Forks
- 27
- Avg merge
- 1h 21m
- Merged PRs (30d)
- 7
Description
## Describe the bug
Not possible to complete confirm instance in localtest
## To Reproduce
Steps to reproduce the behavior:
1. Create an instance in local test
2. Retrieve app owner token
3. POST request to instance/complete endpoint
4. See error
## Expected behavior
It should be possible to complete confirm with app owner token i local test
## Additional info
```
info: Microsoft.AspNetCore.Authorization.DefaultAuthorizationService[2]
Authorization failed. Fail() was explicitly called.
info: AltinnCore.Authentication.JwtCookie.JwtCookieHandler[13]
AuthenticationScheme: JwtCookie was forbidden.
```
Contributor guide
Research direction
Start by reproducing the issue in Localtest using the listed steps: create an instance, retrieve the app owner token, and POST to the instance/complete endpoint. Investigate why authorization rejects the app owner token, then verify that completing confirmation succeeds without the Forbidden response.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100