-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Low
-
Component/s: Ecosystem
-
None
-
Minor
-
2
Issue Summary
When user is logged in under the account that doesn't exist in Confluence instance, calling Forge's invokeRemote function fails with the FCT validation error.
Steps to Reproduce
- Allow anonymous access to the module in Forge app manifest:
unlicensedAccess: - anonymous
- Access the app as an anonymous (not logged-in) user, everything works as expected and user can use the app.
- Log in to the same Confluence instance with a user who does not exist in that instance and call remote backend via invokeRemote from Custom UI: receive the error:
Error: Failed to validate FCT: 'accountId' claim mismatch - Add a user as a guest to this Confluence instance, then remove it.
- For the same scenario the error is now the following:
Error: Invocation of the function is forbidden
Expected Results
No errors and both cases a treated as anonymous user.
Actual Results
Error: Failed to validate FCT: 'accountId' claim mismatch Error: Invocation of the function is forbidden
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available