Altinn / Altinn/app-lib-dotnet

Complete confirming an instance in Localtest gives Forbidden response

Open
#119 0 comments 0 reactions 0 assignees View on GitHub
kind/bug status/triage
Dominant language
C#
Stars
8
Forks
27
Avg merge
1h 21m
Merged PRs (30d)
7

Description

## Describe the bug
Not possible to complete confirm instance in localtest

## To Reproduce
Steps to reproduce the behavior:
1. Create an instance in local test
2. Retrieve app owner token
3. POST request to instance/complete endpoint
4. See error

## Expected behavior
It should be possible to complete confirm with app owner token i local test

## Additional info
```
info: Microsoft.AspNetCore.Authorization.DefaultAuthorizationService[2]
Authorization failed. Fail() was explicitly called.
info: AltinnCore.Authentication.JwtCookie.JwtCookieHandler[13]
AuthenticationScheme: JwtCookie was forbidden.
```

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the issue in Localtest using the listed steps: create an instance, retrieve the app owner token, and POST to the instance/complete endpoint. Investigate why authorization rejects the app owner token, then verify that completing confirmation succeeds without the Forbidden response.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
authentication
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.